[2025-09-06 00:15:04][354916442021381][1 ms][INFO] === Request start === [2025-09-06 00:15:04][354916442021381][2 ms][DEBUG] START check_scloud [2025-09-06 00:15:04][354916442021381][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 00:15:04][354916442021381][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 16156 4972 24369432 129412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 00:15:04][354916442021381][269 ms][DEBUG] targetPkg: running [2025-09-06 00:15:04][354916442021381][269 ms][DEBUG] END check_scloud in 267 ms [2025-09-06 00:15:04][354916442021381][269 ms][DEBUG] START check_boot_completed [2025-09-06 00:15:04][354916442021381][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 00:15:04][354916442021381][300 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 00:15:04][354916442021381][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 00:15:04][354916442021381][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 00:15:04][354916442021381][347 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 00:15:04][354916442021381][347 ms][DEBUG] rawBody.length=1150 [2025-09-06 00:15:04][354916442021381][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442021381\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1724\"}'\'' -e'"" [2025-09-06 00:15:04][354916442021381][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 00:15:04][354916442021381][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442021381\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1724\"}'\'' -e'"" [2025-09-06 00:15:15][354916442021381][11766 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0bfc89c-3f70-4f7a-9b95-42b790b1e3e8","id":"QR_f0bfc89c-3f70-4f7a-9b95-42b790b1e3e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 00:15:15][354916442021381][11922 ms][DEBUG] proc_open done in 11575 ms; code=255; res.len=3343 [2025-09-06 00:15:15][354916442021381][11922 ms][DEBUG] END runCmdUntilRes#1 in 11575 ms [2025-09-06 00:15:15][354916442021381][11922 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 00:15:18][354916442021381][1 ms][INFO] === Request start === [2025-09-06 00:15:18][354916442021381][1 ms][DEBUG] START check_scloud [2025-09-06 00:15:18][354916442021381][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 00:15:18][354916442021381][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 16156 4972 24549868 125872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 00:15:18][354916442021381][315 ms][DEBUG] targetPkg: running [2025-09-06 00:15:18][354916442021381][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 00:15:18][354916442021381][315 ms][DEBUG] START check_boot_completed [2025-09-06 00:15:18][354916442021381][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 00:15:18][354916442021381][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 00:15:18][354916442021381][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 00:15:18][354916442021381][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 00:15:18][354916442021381][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 00:15:18][354916442021381][425 ms][DEBUG] rawBody.length=1160 [2025-09-06 00:15:18][354916442021381][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442021381\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2272\"}'\'' -e'"" [2025-09-06 00:15:18][354916442021381][425 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 00:15:18][354916442021381][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442021381\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2272\"}'\'' -e'"" [2025-09-06 00:15:28][354916442021381][9766 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdc2bb91-e4e4-453d-942b-b43e39581639","id":"QR_cdc2bb91-e4e4-453d-942b-b43e39581639","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 00:15:28][354916442021381][9922 ms][DEBUG] proc_open done in 9497 ms; code=255; res.len=3343 [2025-09-06 00:15:28][354916442021381][9922 ms][DEBUG] END runCmdUntilRes#1 in 9497 ms [2025-09-06 00:15:28][354916442021381][9922 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 00:26:05][355141589155517][1 ms][INFO] === Request start === [2025-09-06 00:26:05][355141589155517][1 ms][DEBUG] START check_scloud [2025-09-06 00:26:05][355141589155517][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 00:26:05][355141589155517][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 16156 4972 24676832 128228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 00:26:05][355141589155517][308 ms][DEBUG] targetPkg: running [2025-09-06 00:26:05][355141589155517][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 00:26:05][355141589155517][308 ms][DEBUG] START check_boot_completed [2025-09-06 00:26:05][355141589155517][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 00:26:05][355141589155517][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 00:26:05][355141589155517][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 00:26:05][355141589155517][388 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 00:26:05][355141589155517][388 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-06 00:26:05][355141589155517][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 00:26:05][355141589155517][526 ms][DEBUG] SU: done in 138 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31179 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2551\nsuccessfulTxPacketsPerSecond: 0.13706832495292784\nretriedTxPackets: 358\nretriedTxPacketsPerSecond: 0.014428244731887143\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2190\nsuccessfulRxPacketsPerSecond: 0.13706832495292784\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 00:26:05][355141589155517][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 00:26:09][355141589155517][4307 ms][DEBUG] SU: done in 3780 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=111 time=403 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 403.344/403.344/403.344/0.000 ms\n [2025-09-06 00:26:09][355141589155517][4307 ms][DEBUG] check_internet: online [2025-09-06 00:26:09][355141589155517][4307 ms][DEBUG] rawBody.length=1160 [2025-09-06 00:26:09][355141589155517][4307 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355141589155517\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3975\"}'\'' -e'"" [2025-09-06 00:26:09][355141589155517][4307 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 00:26:09][355141589155517][4307 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355141589155517\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3975\"}'\'' -e'"" [2025-09-06 00:26:18][355141589155517][13461 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_411f2c00-ede2-412d-b5e7-61f43ad7b5ac","id":"QR_411f2c00-ede2-412d-b5e7-61f43ad7b5ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 00:26:18][355141589155517][13617 ms][DEBUG] proc_open done in 9310 ms; code=255; res.len=3343 [2025-09-06 00:26:18][355141589155517][13617 ms][DEBUG] END runCmdUntilRes#1 in 9310 ms [2025-09-06 00:26:18][355141589155517][13617 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 00:26:22][355141589155517][0 ms][INFO] === Request start === [2025-09-06 00:26:22][355141589155517][1 ms][DEBUG] START check_scloud [2025-09-06 00:26:22][355141589155517][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 00:26:22][355141589155517][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 16156 4972 24838836 139052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 00:26:22][355141589155517][316 ms][DEBUG] targetPkg: running [2025-09-06 00:26:22][355141589155517][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 00:26:22][355141589155517][316 ms][DEBUG] START check_boot_completed [2025-09-06 00:26:22][355141589155517][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 00:26:22][355141589155517][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 00:26:22][355141589155517][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 00:26:23][355141589155517][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 00:26:23][355141589155517][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 00:26:23][355141589155517][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 00:26:23][355141589155517][519 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31179 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2551\nsuccessfulTxPacketsPerSecond: 0.13706832495292784\nretriedTxPackets: 358\nretriedTxPacketsPerSecond: 0.014428244731887143\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2190\nsuccessfulRxPacketsPerSecond: 0.13706832495292784\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 00:26:23][355141589155517][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 00:26:23][355141589155517][1050 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=111 time=422 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 422.995/422.995/422.995/0.000 ms\n [2025-09-06 00:26:23][355141589155517][1050 ms][DEBUG] check_internet: online [2025-09-06 00:26:23][355141589155517][1050 ms][DEBUG] rawBody.length=1150 [2025-09-06 00:26:23][355141589155517][1050 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355141589155517\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6659\"}'\'' -e'"" [2025-09-06 00:26:23][355141589155517][1050 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 00:26:23][355141589155517][1050 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355141589155517\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6659\"}'\'' -e'"" [2025-09-06 00:26:27][355141589155517][5268 ms][DEBUG] proc_open done in 4218 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 00:26:27][355141589155517][5268 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-09-06 00:26:27][355141589155517][5268 ms][WARN] Detected error: Process with pid 16156 either refused to load frida-agent, or terminated during injectionProcess with pid 16156 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 00:26:27][355141589155517][5268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 00:26:28][355141589155517][5549 ms][DEBUG] SU: done in 281 ms; outsystem 5396 4972 12565104 198740 ep_poll 0 S system_server\n [2025-09-06 00:26:28][355141589155517][5549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 00:26:28][355141589155517][5689 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 00:26:28][355141589155517][5689 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 00:26:28][355141589155517][5690 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 00:26:28][355141589155517][5830 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 00:26:28][355141589155517][5830 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 00:26:28][355141589155517][6049 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 00:26:30][355141589155517][8064 ms][DEBUG] START check_boot_completed [2025-09-06 00:26:30][355141589155517][8064 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 00:26:30][355141589155517][8111 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 00:26:30][355141589155517][8111 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 00:26:30][355141589155517][8157 ms][DEBUG] SU: done in 46 ms; out [2025-09-06 00:26:30][355141589155517][8157 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 00:26:33][355141589155517][11172 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 00:26:33][355141589155517][11172 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355141589155517\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6659\"}'\'' -e'"" [2025-09-06 00:26:41][355141589155517][19202 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb9b9e47-461f-4ad0-acef-2a41c0c781b9","id":"QR_cb9b9e47-461f-4ad0-acef-2a41c0c781b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 00:26:41][355141589155517][19358 ms][DEBUG] proc_open done in 8186 ms; code=255; res.len=3343 [2025-09-06 00:26:41][355141589155517][19358 ms][DEBUG] END runCmdUntilRes#2 in 8186 ms [2025-09-06 00:26:41][355141589155517][19358 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 00:28:06][350556394159708][1 ms][INFO] === Request start === [2025-09-06 00:28:06][350556394159708][1 ms][DEBUG] START check_scloud [2025-09-06 00:28:06][350556394159708][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 00:28:06][350556394159708][262 ms][DEBUG] SU: done in 260 ms; outu0_a118 20522 4972 23442264 127944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 00:28:06][350556394159708][262 ms][DEBUG] targetPkg: running [2025-09-06 00:28:06][350556394159708][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-06 00:28:06][350556394159708][262 ms][DEBUG] START check_boot_completed [2025-09-06 00:28:06][350556394159708][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 00:28:06][350556394159708][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 00:28:06][350556394159708][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 00:28:06][350556394159708][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 00:28:06][350556394159708][355 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 00:28:06][350556394159708][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 00:28:06][350556394159708][496 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31179 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2551\nsuccessfulTxPacketsPerSecond: 0.13706832495292784\nretriedTxPackets: 358\nretriedTxPacketsPerSecond: 0.014428244731887143\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2190\nsuccessfulRxPacketsPerSecond: 0.13706832495292784\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 00:28:06][350556394159708][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 00:28:07][350556394159708][1089 ms][DEBUG] SU: done in 593 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=111 time=485 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 485.788/485.788/485.788/0.000 ms\n [2025-09-06 00:28:07][350556394159708][1090 ms][DEBUG] check_internet: online [2025-09-06 00:28:07][350556394159708][1090 ms][DEBUG] rawBody.length=1160 [2025-09-06 00:28:07][350556394159708][1090 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350556394159708\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5681\"}'\'' -e'"" [2025-09-06 00:28:07][350556394159708][1090 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 00:28:07][350556394159708][1090 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350556394159708\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5681\"}'\'' -e'"" [2025-09-06 00:28:16][350556394159708][10228 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45b6889b-3263-4636-b0a8-ab23f769a762","id":"QR_45b6889b-3263-4636-b0a8-ab23f769a762","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 00:28:16][350556394159708][10384 ms][DEBUG] proc_open done in 9294 ms; code=255; res.len=3343 [2025-09-06 00:28:16][350556394159708][10384 ms][DEBUG] END runCmdUntilRes#1 in 9294 ms [2025-09-06 00:28:16][350556394159708][10384 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 00:28:20][350556394159708][0 ms][INFO] === Request start === [2025-09-06 00:28:20][350556394159708][1 ms][DEBUG] START check_scloud [2025-09-06 00:28:20][350556394159708][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 00:28:20][350556394159708][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 20522 4972 23628412 138880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 00:28:20][350556394159708][319 ms][DEBUG] targetPkg: running [2025-09-06 00:28:20][350556394159708][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 00:28:20][350556394159708][319 ms][DEBUG] START check_boot_completed [2025-09-06 00:28:20][350556394159708][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 00:28:20][350556394159708][350 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 00:28:20][350556394159708][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 00:28:20][350556394159708][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 00:28:20][350556394159708][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 00:28:20][350556394159708][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 00:28:20][350556394159708][522 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31179 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 135Mbps, Tx Link speed: 135Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2551\nsuccessfulTxPacketsPerSecond: 0.13706832495292784\nretriedTxPackets: 358\nretriedTxPacketsPerSecond: 0.014428244731887143\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2190\nsuccessfulRxPacketsPerSecond: 0.13706832495292784\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -44 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 00:28:20][350556394159708][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 00:28:21][350556394159708][1022 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=111 time=397 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 397.146/397.146/397.146/0.000 ms\n [2025-09-06 00:28:21][350556394159708][1022 ms][DEBUG] check_internet: online [2025-09-06 00:28:21][350556394159708][1022 ms][DEBUG] rawBody.length=1150 [2025-09-06 00:28:21][350556394159708][1022 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350556394159708\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8259\"}'\'' -e'"" [2025-09-06 00:28:21][350556394159708][1022 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 00:28:21][350556394159708][1022 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350556394159708\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8259\"}'\'' -e'"" [2025-09-06 00:28:28][350556394159708][8333 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71a168bc-8c0b-4b6f-860a-6e48ea5b4cf3","id":"QR_71a168bc-8c0b-4b6f-860a-6e48ea5b4cf3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 00:28:28][350556394159708][8489 ms][DEBUG] proc_open done in 7467 ms; code=255; res.len=3343 [2025-09-06 00:28:28][350556394159708][8489 ms][DEBUG] END runCmdUntilRes#1 in 7467 ms [2025-09-06 00:28:28][350556394159708][8489 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 00:33:07][357035512952495][1 ms][INFO] === Request start === [2025-09-06 00:33:07][357035512952495][1 ms][DEBUG] START check_scloud [2025-09-06 00:33:07][357035512952495][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 00:33:07][357035512952495][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 20522 4972 23712560 151368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 00:33:07][357035512952495][286 ms][DEBUG] targetPkg: running [2025-09-06 00:33:07][357035512952495][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 00:33:07][357035512952495][286 ms][DEBUG] START check_boot_completed [2025-09-06 00:33:07][357035512952495][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 00:33:07][357035512952495][333 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 00:33:07][357035512952495][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 00:33:08][357035512952495][427 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 00:33:08][357035512952495][427 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 00:33:08][357035512952495][427 ms][DEBUG] rawBody.length=1170 [2025-09-06 00:33:08][357035512952495][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357035512952495\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9TR20160AJ\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2222\"}'\'' -e'"" [2025-09-06 00:33:08][357035512952495][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 00:33:08][357035512952495][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357035512952495\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9TR20160AJ\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2222\"}'\'' -e'"" [2025-09-06 00:33:16][357035512952495][9393 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a39b4c0f-544b-4d72-82e9-98b47038c411","id":"QR_a39b4c0f-544b-4d72-82e9-98b47038c411","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 00:33:17][357035512952495][9549 ms][DEBUG] proc_open done in 9122 ms; code=255; res.len=3343 [2025-09-06 00:33:17][357035512952495][9549 ms][DEBUG] END runCmdUntilRes#1 in 9122 ms [2025-09-06 00:33:17][357035512952495][9549 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 00:51:04][359185447177995][1 ms][INFO] === Request start === [2025-09-06 00:51:04][359185447177995][1 ms][DEBUG] START check_scloud [2025-09-06 00:51:04][359185447177995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 00:51:04][359185447177995][341 ms][DEBUG] SU: done in 340 ms; out [2025-09-06 00:51:04][359185447177995][341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 00:51:04][359185447177995][372 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 00:51:04][359185447177995][372 ms][DEBUG] check_devices: device found [2025-09-06 00:51:04][359185447177995][372 ms][WARN] targetPkg: not running, restarting [2025-09-06 00:51:04][359185447177995][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 00:51:05][359185447177995][497 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 00:51:05][359185447177995][497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 00:51:05][359185447177995][685 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 00:51:07][359185447177995][2700 ms][DEBUG] END check_scloud in 2698 ms [2025-09-06 00:51:07][359185447177995][2700 ms][DEBUG] START check_boot_completed [2025-09-06 00:51:07][359185447177995][2700 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 00:51:07][359185447177995][2746 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 00:51:07][359185447177995][2747 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 00:51:07][359185447177995][2793 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 00:51:07][359185447177995][2794 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 00:51:07][359185447177995][2794 ms][DEBUG] rawBody.length=1160 [2025-09-06 00:51:07][359185447177995][2794 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359185447177995\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3071\"}'\'' -e'"" [2025-09-06 00:51:07][359185447177995][2794 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 00:51:07][359185447177995][2794 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359185447177995\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3071\"}'\'' -e'"" [2025-09-06 00:51:14][359185447177995][9823 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ebe82f9d-8e81-4537-916b-88f3e2265891","id":"QR_ebe82f9d-8e81-4537-916b-88f3e2265891","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 00:51:14][359185447177995][9979 ms][DEBUG] proc_open done in 7185 ms; code=255; res.len=3343 [2025-09-06 00:51:14][359185447177995][9979 ms][DEBUG] END runCmdUntilRes#1 in 7185 ms [2025-09-06 00:51:14][359185447177995][9979 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 00:51:18][359185447177995][0 ms][INFO] === Request start === [2025-09-06 00:51:18][359185447177995][1 ms][DEBUG] START check_scloud [2025-09-06 00:51:18][359185447177995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 00:51:18][359185447177995][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 32158 21589 23897048 124936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 00:51:18][359185447177995][257 ms][DEBUG] targetPkg: running [2025-09-06 00:51:18][359185447177995][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-06 00:51:18][359185447177995][257 ms][DEBUG] START check_boot_completed [2025-09-06 00:51:18][359185447177995][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 00:51:18][359185447177995][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 00:51:18][359185447177995][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 00:51:18][359185447177995][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 00:51:18][359185447177995][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 00:51:18][359185447177995][335 ms][DEBUG] rawBody.length=1150 [2025-09-06 00:51:18][359185447177995][335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359185447177995\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7455\"}'\'' -e'"" [2025-09-06 00:51:18][359185447177995][335 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 00:51:18][359185447177995][335 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359185447177995\",\"model\":\"SM-S908U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7455\"}'\'' -e'"" [2025-09-06 00:51:23][359185447177995][4912 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7930693d-1f3d-4123-9417-6eba57320e61","id":"QR_7930693d-1f3d-4123-9417-6eba57320e61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 00:51:23][359185447177995][5068 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-06 00:51:23][359185447177995][5068 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-06 00:51:23][359185447177995][5068 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 01:11:03][352795337282064][1 ms][INFO] === Request start === [2025-09-06 01:11:03][352795337282064][1 ms][DEBUG] START check_scloud [2025-09-06 01:11:03][352795337282064][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:11:03][352795337282064][319 ms][DEBUG] SU: done in 317 ms; outu0_a118 32158 21589 23972564 113652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:11:03][352795337282064][319 ms][DEBUG] targetPkg: running [2025-09-06 01:11:03][352795337282064][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 01:11:03][352795337282064][319 ms][DEBUG] START check_boot_completed [2025-09-06 01:11:03][352795337282064][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:11:03][352795337282064][350 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 01:11:03][352795337282064][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:11:03][352795337282064][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 01:11:03][352795337282064][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 01:11:03][352795337282064][397 ms][DEBUG] rawBody.length=1150 [2025-09-06 01:11:03][352795337282064][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795337282064\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4198\"}'\'' -e'"" [2025-09-06 01:11:03][352795337282064][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:11:03][352795337282064][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795337282064\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4198\"}'\'' -e'"" [2025-09-06 01:11:09][352795337282064][6333 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6361e0f-5087-4650-bd8e-b5c75faa14f2","id":"QR_f6361e0f-5087-4650-bd8e-b5c75faa14f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 01:11:09][352795337282064][6489 ms][DEBUG] proc_open done in 6092 ms; code=255; res.len=3343 [2025-09-06 01:11:09][352795337282064][6489 ms][DEBUG] END runCmdUntilRes#1 in 6092 ms [2025-09-06 01:11:09][352795337282064][6489 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 01:11:12][352795337282064][0 ms][INFO] === Request start === [2025-09-06 01:11:12][352795337282064][1 ms][DEBUG] START check_scloud [2025-09-06 01:11:12][352795337282064][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:11:12][352795337282064][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 32158 21589 24173416 124868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:11:12][352795337282064][333 ms][DEBUG] targetPkg: running [2025-09-06 01:11:12][352795337282064][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-06 01:11:12][352795337282064][333 ms][DEBUG] START check_boot_completed [2025-09-06 01:11:12][352795337282064][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:11:12][352795337282064][380 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 01:11:12][352795337282064][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:11:12][352795337282064][442 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 01:11:12][352795337282064][442 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 01:11:12][352795337282064][442 ms][DEBUG] rawBody.length=1160 [2025-09-06 01:11:12][352795337282064][442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795337282064\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1317\"}'\'' -e'"" [2025-09-06 01:11:12][352795337282064][442 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:11:12][352795337282064][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795337282064\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1317\"}'\'' -e'"" [2025-09-06 01:11:17][352795337282064][5691 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e0792be-95de-4f66-9f20-f00126180a6d","id":"QR_1e0792be-95de-4f66-9f20-f00126180a6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 01:11:18][352795337282064][5847 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-06 01:11:18][352795337282064][5847 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-06 01:11:18][352795337282064][5847 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 01:15:03][357917278037746][1 ms][INFO] === Request start === [2025-09-06 01:15:03][357917278037746][1 ms][DEBUG] START check_scloud [2025-09-06 01:15:03][357917278037746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:15:04][357917278037746][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 32158 21589 24285416 136544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:15:04][357917278037746][318 ms][DEBUG] targetPkg: running [2025-09-06 01:15:04][357917278037746][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 01:15:04][357917278037746][318 ms][DEBUG] START check_boot_completed [2025-09-06 01:15:04][357917278037746][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:15:04][357917278037746][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 01:15:04][357917278037746][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:15:04][357917278037746][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 01:15:04][357917278037746][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 01:15:04][357917278037746][396 ms][DEBUG] rawBody.length=1150 [2025-09-06 01:15:04][357917278037746][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357917278037746\",\"model\":\"SM-E236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4511\"}'\'' -e'"" [2025-09-06 01:15:04][357917278037746][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:15:04][357917278037746][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357917278037746\",\"model\":\"SM-E236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4511\"}'\'' -e'"" [2025-09-06 01:15:10][357917278037746][6598 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0781152-ea3f-4904-b787-0a11281bb683","id":"QR_e0781152-ea3f-4904-b787-0a11281bb683","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 01:15:10][357917278037746][6754 ms][DEBUG] proc_open done in 6358 ms; code=255; res.len=3343 [2025-09-06 01:15:10][357917278037746][6754 ms][DEBUG] END runCmdUntilRes#1 in 6358 ms [2025-09-06 01:15:10][357917278037746][6754 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 01:15:13][357917278037746][0 ms][INFO] === Request start === [2025-09-06 01:15:13][357917278037746][1 ms][DEBUG] START check_scloud [2025-09-06 01:15:13][357917278037746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:15:13][357917278037746][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 32158 21589 24456560 147300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:15:13][357917278037746][311 ms][DEBUG] targetPkg: running [2025-09-06 01:15:13][357917278037746][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 01:15:13][357917278037746][311 ms][DEBUG] START check_boot_completed [2025-09-06 01:15:13][357917278037746][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:15:13][357917278037746][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 01:15:13][357917278037746][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:15:13][357917278037746][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 01:15:13][357917278037746][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 01:15:13][357917278037746][421 ms][DEBUG] rawBody.length=1160 [2025-09-06 01:15:13][357917278037746][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357917278037746\",\"model\":\"SM-E236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1003\"}'\'' -e'"" [2025-09-06 01:15:13][357917278037746][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:15:13][357917278037746][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357917278037746\",\"model\":\"SM-E236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1003\"}'\'' -e'"" [2025-09-06 01:15:18][357917278037746][5747 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b9630e4-9d86-43be-944d-bb882514055e","id":"QR_3b9630e4-9d86-43be-944d-bb882514055e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 01:15:19][357917278037746][5903 ms][DEBUG] proc_open done in 5482 ms; code=255; res.len=3343 [2025-09-06 01:15:19][357917278037746][5903 ms][DEBUG] END runCmdUntilRes#1 in 5483 ms [2025-09-06 01:15:19][357917278037746][5903 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 01:18:04][353428898023268][1 ms][INFO] === Request start === [2025-09-06 01:18:04][353428898023268][1 ms][DEBUG] START check_scloud [2025-09-06 01:18:04][353428898023268][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:18:05][353428898023268][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 32158 21589 24582576 159388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:18:05][353428898023268][317 ms][DEBUG] targetPkg: running [2025-09-06 01:18:05][353428898023268][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 01:18:05][353428898023268][317 ms][DEBUG] START check_boot_completed [2025-09-06 01:18:05][353428898023268][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:18:05][353428898023268][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 01:18:05][353428898023268][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:18:05][353428898023268][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 01:18:05][353428898023268][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 01:18:05][353428898023268][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 01:18:05][353428898023268][551 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1407\nsuccessfulTxPacketsPerSecond: 0.32312603220815844\nretriedTxPackets: 249\nretriedTxPacketsPerSecond: 0.08812528151131593\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1241\nsuccessfulRxPacketsPerSecond: 0.28395924042535137\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 01:18:05][353428898023268][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 01:18:07][353428898023268][2879 ms][DEBUG] SU: done in 2327 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=111 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.325/302.325/302.325/0.000 ms\n [2025-09-06 01:18:07][353428898023268][2879 ms][DEBUG] check_internet: online [2025-09-06 01:18:07][353428898023268][2879 ms][DEBUG] rawBody.length=1160 [2025-09-06 01:18:07][353428898023268][2879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428898023268\",\"model\":\"SM-M127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5681\"}'\'' -e'"" [2025-09-06 01:18:07][353428898023268][2879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:18:07][353428898023268][2879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428898023268\",\"model\":\"SM-M127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5681\"}'\'' -e'"" [2025-09-06 01:18:22][353428898023268][17235 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c1a18503-0df1-4555-82dd-955a84974a04","id":"QR_c1a18503-0df1-4555-82dd-955a84974a04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 01:18:22][353428898023268][17391 ms][DEBUG] proc_open done in 14512 ms; code=255; res.len=3343 [2025-09-06 01:18:22][353428898023268][17391 ms][DEBUG] END runCmdUntilRes#1 in 14512 ms [2025-09-06 01:18:22][353428898023268][17391 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 01:18:25][353428898023268][0 ms][INFO] === Request start === [2025-09-06 01:18:25][353428898023268][1 ms][DEBUG] START check_scloud [2025-09-06 01:18:25][353428898023268][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:18:26][353428898023268][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 32158 21589 24733240 170088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:18:26][353428898023268][314 ms][DEBUG] targetPkg: running [2025-09-06 01:18:26][353428898023268][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 01:18:26][353428898023268][314 ms][DEBUG] START check_boot_completed [2025-09-06 01:18:26][353428898023268][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:18:26][353428898023268][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 01:18:26][353428898023268][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:18:26][353428898023268][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 01:18:26][353428898023268][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 01:18:26][353428898023268][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 01:18:26][353428898023268][517 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1407\nsuccessfulTxPacketsPerSecond: 0.32312603220815844\nretriedTxPackets: 249\nretriedTxPacketsPerSecond: 0.08812528151131593\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1241\nsuccessfulRxPacketsPerSecond: 0.28395924042535137\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 01:18:26][353428898023268][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 01:18:26][353428898023268][1017 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=111 time=400 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 400.900/400.900/400.900/0.000 ms\n [2025-09-06 01:18:26][353428898023268][1017 ms][DEBUG] check_internet: online [2025-09-06 01:18:26][353428898023268][1017 ms][DEBUG] rawBody.length=1150 [2025-09-06 01:18:26][353428898023268][1017 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428898023268\",\"model\":\"SM-M127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2819\"}'\'' -e'"" [2025-09-06 01:18:26][353428898023268][1017 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:18:26][353428898023268][1017 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428898023268\",\"model\":\"SM-M127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2819\"}'\'' -e'"" [2025-09-06 01:18:34][353428898023268][8640 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c9152cb-ccf5-4fe7-91a2-34c005437d17","id":"QR_5c9152cb-ccf5-4fe7-91a2-34c005437d17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 01:18:34][353428898023268][8796 ms][DEBUG] proc_open done in 7779 ms; code=255; res.len=3343 [2025-09-06 01:18:34][353428898023268][8796 ms][DEBUG] END runCmdUntilRes#1 in 7779 ms [2025-09-06 01:18:34][353428898023268][8796 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 01:21:04][359823611232663][1 ms][INFO] === Request start === [2025-09-06 01:21:04][359823611232663][1 ms][DEBUG] START check_scloud [2025-09-06 01:21:04][359823611232663][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:21:05][359823611232663][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 32158 21589 24863352 179996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:21:05][359823611232663][320 ms][DEBUG] targetPkg: running [2025-09-06 01:21:05][359823611232663][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 01:21:05][359823611232663][320 ms][DEBUG] START check_boot_completed [2025-09-06 01:21:05][359823611232663][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:21:05][359823611232663][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 01:21:05][359823611232663][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:21:05][359823611232663][430 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 01:21:05][359823611232663][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 01:21:05][359823611232663][430 ms][DEBUG] rawBody.length=1160 [2025-09-06 01:21:05][359823611232663][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359823611232663\",\"model\":\"SM-G781U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5076\"}'\'' -e'"" [2025-09-06 01:21:05][359823611232663][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:21:05][359823611232663][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359823611232663\",\"model\":\"SM-G781U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5076\"}'\'' -e'"" [2025-09-06 01:21:11][359823611232663][7178 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97f91e2f-a5c1-4182-87ff-b2a03370bc45","id":"QR_97f91e2f-a5c1-4182-87ff-b2a03370bc45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 01:21:12][359823611232663][7334 ms][DEBUG] proc_open done in 6904 ms; code=255; res.len=3343 [2025-09-06 01:21:12][359823611232663][7334 ms][DEBUG] END runCmdUntilRes#1 in 6904 ms [2025-09-06 01:21:12][359823611232663][7334 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 01:21:15][359823611232663][0 ms][INFO] === Request start === [2025-09-06 01:21:15][359823611232663][1 ms][DEBUG] START check_scloud [2025-09-06 01:21:15][359823611232663][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:21:15][359823611232663][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 32158 21589 25020160 191716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:21:15][359823611232663][325 ms][DEBUG] targetPkg: running [2025-09-06 01:21:15][359823611232663][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-06 01:21:15][359823611232663][325 ms][DEBUG] START check_boot_completed [2025-09-06 01:21:15][359823611232663][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:21:15][359823611232663][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 01:21:15][359823611232663][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:21:16][359823611232663][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 01:21:16][359823611232663][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 01:21:16][359823611232663][434 ms][DEBUG] rawBody.length=1150 [2025-09-06 01:21:16][359823611232663][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359823611232663\",\"model\":\"SM-G781U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-09-06 01:21:16][359823611232663][435 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:21:16][359823611232663][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359823611232663\",\"model\":\"SM-G781U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-09-06 01:21:20][359823611232663][4823 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e130a989-97a6-4445-93f5-379364f37a62","id":"QR_e130a989-97a6-4445-93f5-379364f37a62","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 01:21:20][359823611232663][4980 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-09-06 01:21:20][359823611232663][4980 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-09-06 01:21:20][359823611232663][4980 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 01:25:05][353607431155279][1 ms][INFO] === Request start === [2025-09-06 01:25:05][353607431155279][1 ms][DEBUG] START check_scloud [2025-09-06 01:25:05][353607431155279][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:25:05][353607431155279][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 32158 21589 25156352 202676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:25:05][353607431155279][297 ms][DEBUG] targetPkg: running [2025-09-06 01:25:05][353607431155279][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 01:25:05][353607431155279][297 ms][DEBUG] START check_boot_completed [2025-09-06 01:25:05][353607431155279][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:25:05][353607431155279][327 ms][DEBUG] ADB: done in 29 ms; out [2025-09-06 01:25:05][353607431155279][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:25:05][353607431155279][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 01:25:05][353607431155279][374 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 01:25:05][353607431155279][374 ms][DEBUG] rawBody.length=1150 [2025-09-06 01:25:05][353607431155279][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607431155279\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2937\"}'\'' -e'"" [2025-09-06 01:25:05][353607431155279][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:25:05][353607431155279][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607431155279\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2937\"}'\'' -e'"" [2025-09-06 01:25:11][353607431155279][6075 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-06 01:25:11][353607431155279][6232 ms][DEBUG] proc_open done in 5857 ms; code=255; res.len=107 [2025-09-06 01:25:11][353607431155279][6232 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-09-06 01:25:11][353607431155279][6232 ms][INFO] SUCCESS response from frida (len=107) [2025-09-06 01:25:11][][0 ms][INFO] === Request start === [2025-09-06 01:25:11][][1 ms][DEBUG] START check_scloud [2025-09-06 01:25:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:25:12][][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 32158 21589 25294860 208824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:25:12][][318 ms][DEBUG] targetPkg: running [2025-09-06 01:25:12][][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 01:25:12][][318 ms][DEBUG] START check_boot_completed [2025-09-06 01:25:12][][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:25:12][][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 01:25:12][][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:25:12][][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 01:25:12][][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 01:25:12][][427 ms][DEBUG] rawBody.length=1131 [2025-09-06 01:25:12][][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX312A38A\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7543\"}'\'' -e'"" [2025-09-06 01:25:12][][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:25:12][][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX312A38A\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7543\"}'\'' -e'"" [2025-09-06 01:25:16][][4660 ms][DEBUG] proc_open done in 4233 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 01:25:16][][4660 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-06 01:25:16][][4660 ms][WARN] Detected error: Process with pid 32158 either refused to load frida-agent, or terminated during injectionProcess with pid 32158 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 01:25:16][][4660 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 01:25:16][][4926 ms][DEBUG] SU: done in 266 ms; outsystem 21790 21589 12944932 234404 ep_poll 0 S system_server\n [2025-09-06 01:25:16][][4926 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 01:25:17][][5066 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 01:25:17][][5066 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 01:25:17][][5067 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 01:25:17][][5207 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 01:25:17][][5207 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 01:25:17][][5441 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 01:25:19][][7456 ms][DEBUG] START check_boot_completed [2025-09-06 01:25:19][][7456 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:25:19][][7503 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 01:25:19][][7503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:25:19][][7551 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 01:25:19][][7551 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 01:25:22][][10565 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 01:25:22][][10565 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX312A38A\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7543\"}'\'' -e'"" [2025-09-06 01:25:26][][14158 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-06 01:25:26][][14314 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=107 [2025-09-06 01:25:26][][14314 ms][DEBUG] END runCmdUntilRes#2 in 3749 ms [2025-09-06 01:25:26][][14314 ms][INFO] SUCCESS response from frida (len=107) [2025-09-06 01:25:27][353607431155279][0 ms][INFO] === Request start === [2025-09-06 01:25:27][353607431155279][1 ms][DEBUG] START check_scloud [2025-09-06 01:25:27][353607431155279][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:25:28][353607431155279][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 2783 21589 23994648 123844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:25:28][353607431155279][250 ms][DEBUG] targetPkg: running [2025-09-06 01:25:28][353607431155279][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-06 01:25:28][353607431155279][250 ms][DEBUG] START check_boot_completed [2025-09-06 01:25:28][353607431155279][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:25:28][353607431155279][295 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 01:25:28][353607431155279][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:25:28][353607431155279][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 01:25:28][353607431155279][342 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 01:25:28][353607431155279][342 ms][DEBUG] rawBody.length=1160 [2025-09-06 01:25:28][353607431155279][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607431155279\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9271\"}'\'' -e'"" [2025-09-06 01:25:28][353607431155279][342 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:25:28][353607431155279][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607431155279\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9271\"}'\'' -e'"" [2025-09-06 01:25:33][353607431155279][5903 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15ef06ca-0a2d-4f29-a032-d9d0882e986c","id":"QR_15ef06ca-0a2d-4f29-a032-d9d0882e986c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 01:25:34][353607431155279][6060 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-06 01:25:34][353607431155279][6060 ms][DEBUG] END runCmdUntilRes#1 in 5718 ms [2025-09-06 01:25:34][353607431155279][6060 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 01:50:04][350471128705810][1 ms][INFO] === Request start === [2025-09-06 01:50:04][350471128705810][1 ms][DEBUG] START check_scloud [2025-09-06 01:50:04][350471128705810][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:50:04][350471128705810][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 2783 21589 24041564 139220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:50:04][350471128705810][317 ms][DEBUG] targetPkg: running [2025-09-06 01:50:04][350471128705810][317 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 01:50:04][350471128705810][317 ms][DEBUG] START check_boot_completed [2025-09-06 01:50:04][350471128705810][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:50:04][350471128705810][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 01:50:04][350471128705810][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:50:04][350471128705810][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 01:50:04][350471128705810][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 01:50:04][350471128705810][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 01:50:04][350471128705810][505 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1889\nsuccessfulTxPacketsPerSecond: 0.036530044300980995\nretriedTxPackets: 387\nretriedTxPacketsPerSecond: 0.026567304946167998\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1676\nsuccessfulRxPacketsPerSecond: 0.026567304946167998\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 01:50:04][350471128705810][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 01:50:06][350471128705810][2113 ms][DEBUG] SU: done in 1608 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=111 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.849/302.849/302.849/0.000 ms\n [2025-09-06 01:50:06][350471128705810][2113 ms][DEBUG] check_internet: online [2025-09-06 01:50:06][350471128705810][2113 ms][DEBUG] rawBody.length=1150 [2025-09-06 01:50:06][350471128705810][2113 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128705810\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2012\"}'\'' -e'"" [2025-09-06 01:50:06][350471128705810][2114 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:50:06][350471128705810][2114 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128705810\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2012\"}'\'' -e'"" [2025-09-06 01:50:11][350471128705810][6721 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17292808-3aa0-44fa-ba75-0a34940b3f4f","id":"QR_17292808-3aa0-44fa-ba75-0a34940b3f4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 01:50:11][350471128705810][6877 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-06 01:50:11][350471128705810][6877 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-06 01:50:11][350471128705810][6877 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 01:50:13][350471128705810][0 ms][INFO] === Request start === [2025-09-06 01:50:13][350471128705810][1 ms][DEBUG] START check_scloud [2025-09-06 01:50:13][350471128705810][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 01:50:13][350471128705810][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 2783 21589 24207728 129584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 01:50:13][350471128705810][258 ms][DEBUG] targetPkg: running [2025-09-06 01:50:13][350471128705810][258 ms][DEBUG] END check_scloud in 258 ms [2025-09-06 01:50:13][350471128705810][258 ms][DEBUG] START check_boot_completed [2025-09-06 01:50:13][350471128705810][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 01:50:13][350471128705810][304 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 01:50:13][350471128705810][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 01:50:13][350471128705810][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 01:50:13][350471128705810][351 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 01:50:13][350471128705810][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 01:50:13][350471128705810][460 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1889\nsuccessfulTxPacketsPerSecond: 0.036530044300980995\nretriedTxPackets: 387\nretriedTxPacketsPerSecond: 0.026567304946167998\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1676\nsuccessfulRxPacketsPerSecond: 0.026567304946167998\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 01:50:13][350471128705810][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 01:50:14][350471128705810][866 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=111 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.640/288.640/288.640/0.000 ms\n [2025-09-06 01:50:14][350471128705810][867 ms][DEBUG] check_internet: online [2025-09-06 01:50:14][350471128705810][867 ms][DEBUG] rawBody.length=1160 [2025-09-06 01:50:14][350471128705810][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128705810\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8441\"}'\'' -e'"" [2025-09-06 01:50:14][350471128705810][867 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 01:50:14][350471128705810][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128705810\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8441\"}'\'' -e'"" [2025-09-06 01:50:19][350471128705810][5725 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12d10f0c-a224-441a-b8ef-7708f9726d5e","id":"QR_12d10f0c-a224-441a-b8ef-7708f9726d5e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 01:50:19][350471128705810][5881 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 01:50:19][350471128705810][5881 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 01:50:19][350471128705810][5881 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 02:42:03][352019421051347][1 ms][INFO] === Request start === [2025-09-06 02:42:03][352019421051347][1 ms][DEBUG] START check_scloud [2025-09-06 02:42:03][352019421051347][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 02:42:03][352019421051347][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 2783 21589 24326500 131452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 02:42:03][352019421051347][281 ms][DEBUG] targetPkg: running [2025-09-06 02:42:03][352019421051347][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-06 02:42:03][352019421051347][281 ms][DEBUG] START check_boot_completed [2025-09-06 02:42:03][352019421051347][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 02:42:03][352019421051347][313 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 02:42:03][352019421051347][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 02:42:03][352019421051347][360 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 02:42:03][352019421051347][360 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 02:42:03][352019421051347][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 02:42:03][352019421051347][469 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2081\nsuccessfulTxPacketsPerSecond: 0.019283241898627998\nretriedTxPackets: 472\nretriedTxPacketsPerSecond: 0.019283241898627998\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1852\nsuccessfulRxPacketsPerSecond: 0.019283241898627998\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 02:42:03][352019421051347][469 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 02:42:04][352019421051347][1109 ms][DEBUG] SU: done in 640 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=111 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.098/304.098/304.098/0.000 ms\n [2025-09-06 02:42:04][352019421051347][1109 ms][DEBUG] check_internet: online [2025-09-06 02:42:04][352019421051347][1109 ms][DEBUG] rawBody.length=1150 [2025-09-06 02:42:04][352019421051347][1109 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352019421051347\",\"model\":\"SM-S908N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6660\"}'\'' -e'"" [2025-09-06 02:42:04][352019421051347][1109 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 02:42:04][352019421051347][1109 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352019421051347\",\"model\":\"SM-S908N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6660\"}'\'' -e'"" [2025-09-06 02:42:08][352019421051347][4968 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc02ae26-89e1-4441-803d-4d9eea122c10","id":"QR_dc02ae26-89e1-4441-803d-4d9eea122c10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 02:42:08][352019421051347][5124 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-06 02:42:08][352019421051347][5124 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-09-06 02:42:08][352019421051347][5124 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 02:42:10][352019421051347][0 ms][INFO] === Request start === [2025-09-06 02:42:10][352019421051347][1 ms][DEBUG] START check_scloud [2025-09-06 02:42:10][352019421051347][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 02:42:11][352019421051347][331 ms][DEBUG] SU: done in 331 ms; outu0_a118 2783 21589 24481336 141620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 02:42:11][352019421051347][331 ms][DEBUG] targetPkg: running [2025-09-06 02:42:11][352019421051347][332 ms][DEBUG] END check_scloud in 331 ms [2025-09-06 02:42:11][352019421051347][332 ms][DEBUG] START check_boot_completed [2025-09-06 02:42:11][352019421051347][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 02:42:11][352019421051347][378 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 02:42:11][352019421051347][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 02:42:11][352019421051347][425 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 02:42:11][352019421051347][425 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 02:42:11][352019421051347][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 02:42:11][352019421051347][520 ms][DEBUG] SU: done in 95 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2081\nsuccessfulTxPacketsPerSecond: 0.019283241898627998\nretriedTxPackets: 472\nretriedTxPacketsPerSecond: 0.019283241898627998\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1852\nsuccessfulRxPacketsPerSecond: 0.019283241898627998\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 02:42:11][352019421051347][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 02:42:11][352019421051347][940 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=111 time=333 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 333.811/333.811/333.811/0.000 ms\n [2025-09-06 02:42:11][352019421051347][940 ms][DEBUG] check_internet: online [2025-09-06 02:42:11][352019421051347][940 ms][DEBUG] rawBody.length=1160 [2025-09-06 02:42:11][352019421051347][941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352019421051347\",\"model\":\"SM-S908N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9789\"}'\'' -e'"" [2025-09-06 02:42:11][352019421051347][941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 02:42:11][352019421051347][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352019421051347\",\"model\":\"SM-S908N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9789\"}'\'' -e'"" [2025-09-06 02:42:16][352019421051347][6205 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_275bc780-bab2-4188-892e-f8ff26bb698a","id":"QR_275bc780-bab2-4188-892e-f8ff26bb698a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 02:42:17][352019421051347][6361 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 02:42:17][352019421051347][6361 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-06 02:42:17][352019421051347][6361 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 03:15:05][358898241158281][1 ms][INFO] === Request start === [2025-09-06 03:15:05][358898241158281][1 ms][DEBUG] START check_scloud [2025-09-06 03:15:05][358898241158281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 03:15:05][358898241158281][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 2783 21589 24585196 116408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 03:15:05][358898241158281][313 ms][DEBUG] targetPkg: running [2025-09-06 03:15:05][358898241158281][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 03:15:05][358898241158281][313 ms][DEBUG] START check_boot_completed [2025-09-06 03:15:05][358898241158281][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 03:15:05][358898241158281][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 03:15:05][358898241158281][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 03:15:05][358898241158281][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 03:15:05][358898241158281][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 03:15:05][358898241158281][392 ms][DEBUG] rawBody.length=1160 [2025-09-06 03:15:05][358898241158281][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358898241158281\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6559\"}'\'' -e'"" [2025-09-06 03:15:05][358898241158281][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 03:15:05][358898241158281][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358898241158281\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6559\"}'\'' -e'"" [2025-09-06 03:15:11][358898241158281][6734 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2fc442f7-43d6-4149-b383-0838e464b6f9","id":"QR_2fc442f7-43d6-4149-b383-0838e464b6f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 03:15:12][358898241158281][6890 ms][DEBUG] proc_open done in 6498 ms; code=255; res.len=3343 [2025-09-06 03:15:12][358898241158281][6890 ms][DEBUG] END runCmdUntilRes#1 in 6498 ms [2025-09-06 03:15:12][358898241158281][6890 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 03:15:15][358898241158281][0 ms][INFO] === Request start === [2025-09-06 03:15:15][358898241158281][1 ms][DEBUG] START check_scloud [2025-09-06 03:15:15][358898241158281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 03:15:15][358898241158281][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 2783 21589 24780096 124908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 03:15:15][358898241158281][274 ms][DEBUG] targetPkg: running [2025-09-06 03:15:15][358898241158281][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-06 03:15:15][358898241158281][274 ms][DEBUG] START check_boot_completed [2025-09-06 03:15:15][358898241158281][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 03:15:15][358898241158281][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 03:15:15][358898241158281][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 03:15:16][358898241158281][367 ms][DEBUG] SU: done in 46 ms; out [2025-09-06 03:15:16][358898241158281][367 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 03:15:16][358898241158281][367 ms][DEBUG] rawBody.length=1150 [2025-09-06 03:15:16][358898241158281][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358898241158281\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3804\"}'\'' -e'"" [2025-09-06 03:15:16][358898241158281][367 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 03:15:16][358898241158281][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358898241158281\",\"model\":\"SM-A166M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3804\"}'\'' -e'"" [2025-09-06 03:15:19][358898241158281][4351 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05bbb38e-3448-4633-9653-fe995bf48d2b","id":"QR_05bbb38e-3448-4633-9653-fe995bf48d2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 03:15:20][358898241158281][4507 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-09-06 03:15:20][358898241158281][4507 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-09-06 03:15:20][358898241158281][4507 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 03:32:05][350481567552904][1 ms][INFO] === Request start === [2025-09-06 03:32:05][350481567552904][1 ms][DEBUG] START check_scloud [2025-09-06 03:32:05][350481567552904][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 03:32:05][350481567552904][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 2783 21589 24912428 126180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 03:32:05][350481567552904][314 ms][DEBUG] targetPkg: running [2025-09-06 03:32:05][350481567552904][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 03:32:05][350481567552904][314 ms][DEBUG] START check_boot_completed [2025-09-06 03:32:05][350481567552904][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 03:32:05][350481567552904][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 03:32:05][350481567552904][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 03:32:05][350481567552904][393 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 03:32:05][350481567552904][393 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 03:32:05][350481567552904][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 03:32:05][350481567552904][517 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2496\nsuccessfulTxPacketsPerSecond: 0.0427126824632404\nretriedTxPackets: 592\nretriedTxPacketsPerSecond: 0.0213563412316202\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2242\nsuccessfulRxPacketsPerSecond: 0.0427126824632404\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 03:32:05][350481567552904][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 03:32:06][350481567552904][1298 ms][DEBUG] SU: done in 781 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=409 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 409.129/409.129/409.129/0.000 ms\n [2025-09-06 03:32:06][350481567552904][1299 ms][DEBUG] check_internet: online [2025-09-06 03:32:06][350481567552904][1299 ms][DEBUG] rawBody.length=1160 [2025-09-06 03:32:06][350481567552904][1299 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481567552904\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"L15\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2078\"}'\'' -e'"" [2025-09-06 03:32:06][350481567552904][1299 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 03:32:06][350481567552904][1299 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481567552904\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"L15\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2078\"}'\'' -e'"" [2025-09-06 03:32:11][350481567552904][6641 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41758d77-0d20-496c-9417-c0baf4bf1649","id":"QR_41758d77-0d20-496c-9417-c0baf4bf1649","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 03:32:11][350481567552904][6797 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-06 03:32:11][350481567552904][6797 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-09-06 03:32:11][350481567552904][6797 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 03:38:04][350655882601815][1 ms][INFO] === Request start === [2025-09-06 03:38:04][350655882601815][1 ms][DEBUG] START check_scloud [2025-09-06 03:38:04][350655882601815][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 03:38:05][350655882601815][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 2783 21589 25039708 137120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 03:38:05][350655882601815][259 ms][DEBUG] targetPkg: running [2025-09-06 03:38:05][350655882601815][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-06 03:38:05][350655882601815][259 ms][DEBUG] START check_boot_completed [2025-09-06 03:38:05][350655882601815][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 03:38:05][350655882601815][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 03:38:05][350655882601815][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 03:38:05][350655882601815][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 03:38:05][350655882601815][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 03:38:05][350655882601815][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 03:38:05][350655882601815][447 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2585\nsuccessfulTxPacketsPerSecond: 0.8556046914054982\nretriedTxPackets: 613\nretriedTxPacketsPerSecond: 0.20188425302826365\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2324\nsuccessfulRxPacketsPerSecond: 0.788309940396077\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 03:38:05][350655882601815][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 03:38:06][350655882601815][1837 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.768/304.768/304.768/0.000 ms\n [2025-09-06 03:38:06][350655882601815][1837 ms][DEBUG] check_internet: online [2025-09-06 03:38:06][350655882601815][1837 ms][DEBUG] rawBody.length=1160 [2025-09-06 03:38:06][350655882601815][1837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882601815\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4421\"}'\'' -e'"" [2025-09-06 03:38:06][350655882601815][1837 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 03:38:06][350655882601815][1837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882601815\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4421\"}'\'' -e'"" [2025-09-06 03:38:11][350655882601815][7101 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_513be23b-9de7-4a1d-a8f2-310d724f153f","id":"QR_513be23b-9de7-4a1d-a8f2-310d724f153f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 03:38:12][350655882601815][7257 ms][DEBUG] proc_open done in 5421 ms; code=255; res.len=3343 [2025-09-06 03:38:12][350655882601815][7258 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-09-06 03:38:12][350655882601815][7258 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 03:38:15][350655882601815][0 ms][INFO] === Request start === [2025-09-06 03:38:15][350655882601815][1 ms][DEBUG] START check_scloud [2025-09-06 03:38:15][350655882601815][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 03:38:15][350655882601815][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 2783 21589 25202788 148840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 03:38:15][350655882601815][294 ms][DEBUG] targetPkg: running [2025-09-06 03:38:15][350655882601815][294 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 03:38:15][350655882601815][294 ms][DEBUG] START check_boot_completed [2025-09-06 03:38:15][350655882601815][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 03:38:15][350655882601815][341 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 03:38:15][350655882601815][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 03:38:16][350655882601815][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 03:38:16][350655882601815][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 03:38:16][350655882601815][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 03:38:16][350655882601815][498 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2585\nsuccessfulTxPacketsPerSecond: 0.8556046914054982\nretriedTxPackets: 613\nretriedTxPacketsPerSecond: 0.20188425302826365\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2324\nsuccessfulRxPacketsPerSecond: 0.788309940396077\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 03:38:16][350655882601815][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 03:38:16][350655882601815][888 ms][DEBUG] SU: done in 389 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.758/274.758/274.758/0.000 ms\n [2025-09-06 03:38:16][350655882601815][888 ms][DEBUG] check_internet: online [2025-09-06 03:38:16][350655882601815][888 ms][DEBUG] rawBody.length=1150 [2025-09-06 03:38:16][350655882601815][888 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882601815\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3917\"}'\'' -e'"" [2025-09-06 03:38:16][350655882601815][888 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 03:38:16][350655882601815][888 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882601815\",\"model\":\"SM-A156W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3917\"}'\'' -e'"" [2025-09-06 03:38:20][350655882601815][4668 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de234b47-f3e1-4ca3-8b6c-ac2c5f010d1e","id":"QR_de234b47-f3e1-4ca3-8b6c-ac2c5f010d1e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 03:38:20][350655882601815][4824 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-06 03:38:20][350655882601815][4824 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-09-06 03:38:20][350655882601815][4824 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 03:55:04][355646360436050][1 ms][INFO] === Request start === [2025-09-06 03:55:04][355646360436050][1 ms][DEBUG] START check_scloud [2025-09-06 03:55:04][355646360436050][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 03:55:05][355646360436050][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 2783 21589 25274588 123484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 03:55:05][355646360436050][316 ms][DEBUG] targetPkg: running [2025-09-06 03:55:05][355646360436050][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 03:55:05][355646360436050][316 ms][DEBUG] START check_boot_completed [2025-09-06 03:55:05][355646360436050][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 03:55:05][355646360436050][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 03:55:05][355646360436050][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 03:55:05][355646360436050][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 03:55:05][355646360436050][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 03:55:05][355646360436050][394 ms][DEBUG] rawBody.length=1160 [2025-09-06 03:55:05][355646360436050][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355646360436050\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5751\"}'\'' -e'"" [2025-09-06 03:55:05][355646360436050][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 03:55:05][355646360436050][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355646360436050\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5751\"}'\'' -e'"" [2025-09-06 03:55:09][355646360436050][4877 ms][DEBUG] proc_open done in 4483 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 03:55:09][355646360436050][4877 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-06 03:55:09][355646360436050][4877 ms][WARN] Detected error: Process with pid 2783 either refused to load frida-agent, or terminated during injectionProcess with pid 2783 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 03:55:09][355646360436050][4877 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 03:55:10][355646360436050][5190 ms][DEBUG] SU: done in 313 ms; outsystem 21790 21589 13283404 237140 ep_poll 0 S system_server\n [2025-09-06 03:55:10][355646360436050][5190 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 03:55:10][355646360436050][5346 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 03:55:10][355646360436050][5346 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 03:55:10][355646360436050][5346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 03:55:10][355646360436050][5471 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 03:55:10][355646360436050][5471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 03:55:10][355646360436050][5705 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 03:55:12][355646360436050][7720 ms][DEBUG] START check_boot_completed [2025-09-06 03:55:12][355646360436050][7720 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 03:55:12][355646360436050][7767 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 03:55:12][355646360436050][7767 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 03:55:12][355646360436050][7830 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 03:55:12][355646360436050][7830 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 03:55:15][355646360436050][10844 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 03:55:15][355646360436050][10844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355646360436050\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5751\"}'\'' -e'"" [2025-09-06 03:55:21][355646360436050][17046 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4d22f77-c54b-4c83-b99b-cbc9b124f0b0","id":"QR_d4d22f77-c54b-4c83-b99b-cbc9b124f0b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 03:55:22][355646360436050][17202 ms][DEBUG] proc_open done in 6358 ms; code=255; res.len=3343 [2025-09-06 03:55:22][355646360436050][17202 ms][DEBUG] END runCmdUntilRes#2 in 6358 ms [2025-09-06 03:55:22][355646360436050][17202 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 03:55:25][355646360436050][0 ms][INFO] === Request start === [2025-09-06 03:55:25][355646360436050][1 ms][DEBUG] START check_scloud [2025-09-06 03:55:25][355646360436050][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 03:55:25][355646360436050][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 9584 21589 23888160 124556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 03:55:25][355646360436050][244 ms][DEBUG] targetPkg: running [2025-09-06 03:55:25][355646360436050][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-06 03:55:25][355646360436050][244 ms][DEBUG] START check_boot_completed [2025-09-06 03:55:25][355646360436050][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 03:55:25][355646360436050][290 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 03:55:25][355646360436050][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 03:55:25][355646360436050][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 03:55:25][355646360436050][337 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 03:55:25][355646360436050][337 ms][DEBUG] rawBody.length=1150 [2025-09-06 03:55:25][355646360436050][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355646360436050\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3153\"}'\'' -e'"" [2025-09-06 03:55:25][355646360436050][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 03:55:25][355646360436050][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355646360436050\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3153\"}'\'' -e'"" [2025-09-06 03:55:29][355646360436050][4024 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06da4919-b702-4771-8cc0-28e892b26773","id":"QR_06da4919-b702-4771-8cc0-28e892b26773","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 03:55:29][355646360436050][4180 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-09-06 03:55:29][355646360436050][4180 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-09-06 03:55:29][355646360436050][4180 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 03:55:31][355255110312825][0 ms][INFO] === Request start === [2025-09-06 03:55:31][355255110312825][1 ms][DEBUG] START check_scloud [2025-09-06 03:55:31][355255110312825][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 03:55:31][355255110312825][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 9584 21589 24033460 137420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 03:55:31][355255110312825][300 ms][DEBUG] targetPkg: running [2025-09-06 03:55:31][355255110312825][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 03:55:31][355255110312825][300 ms][DEBUG] START check_boot_completed [2025-09-06 03:55:31][355255110312825][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 03:55:32][355255110312825][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 03:55:32][355255110312825][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 03:55:32][355255110312825][409 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 03:55:32][355255110312825][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 03:55:32][355255110312825][409 ms][DEBUG] rawBody.length=1150 [2025-09-06 03:55:32][355255110312825][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255110312825\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4134\"}'\'' -e'"" [2025-09-06 03:55:32][355255110312825][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 03:55:32][355255110312825][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255110312825\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4134\"}'\'' -e'"" [2025-09-06 03:55:36][355255110312825][5189 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4621ad09-d710-46ac-8e1e-08a57cd9fd1a","id":"QR_4621ad09-d710-46ac-8e1e-08a57cd9fd1a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 03:55:37][355255110312825][5345 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-06 03:55:37][355255110312825][5345 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-06 03:55:37][355255110312825][5345 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 03:55:39][355255110312825][0 ms][INFO] === Request start === [2025-09-06 03:55:39][355255110312825][1 ms][DEBUG] START check_scloud [2025-09-06 03:55:39][355255110312825][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 03:55:39][355255110312825][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 9584 21589 24145176 149072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 03:55:39][355255110312825][326 ms][DEBUG] targetPkg: running [2025-09-06 03:55:39][355255110312825][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-06 03:55:39][355255110312825][326 ms][DEBUG] START check_boot_completed [2025-09-06 03:55:39][355255110312825][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 03:55:39][355255110312825][373 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 03:55:39][355255110312825][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 03:55:39][355255110312825][419 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 03:55:39][355255110312825][419 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 03:55:39][355255110312825][419 ms][DEBUG] rawBody.length=1160 [2025-09-06 03:55:39][355255110312825][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255110312825\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1177\"}'\'' -e'"" [2025-09-06 03:55:39][355255110312825][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 03:55:39][355255110312825][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255110312825\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1177\"}'\'' -e'"" [2025-09-06 03:55:44][355255110312825][5512 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41392577-3470-422a-a2ed-0ecb1da7a03b","id":"QR_41392577-3470-422a-a2ed-0ecb1da7a03b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 03:55:44][355255110312825][5668 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-06 03:55:44][355255110312825][5668 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-06 03:55:44][355255110312825][5669 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:00:08][353548755355782][1 ms][INFO] === Request start === [2025-09-06 04:00:08][353548755355782][1 ms][DEBUG] START check_scloud [2025-09-06 04:00:08][353548755355782][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:00:08][353548755355782][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 9584 21589 24191024 160092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:00:08][353548755355782][307 ms][DEBUG] targetPkg: running [2025-09-06 04:00:08][353548755355782][308 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 04:00:08][353548755355782][308 ms][DEBUG] START check_boot_completed [2025-09-06 04:00:08][353548755355782][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:00:08][353548755355782][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 04:00:08][353548755355782][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:00:09][353548755355782][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:00:09][353548755355782][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 04:00:09][353548755355782][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 04:00:09][353548755355782][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2921\nsuccessfulTxPacketsPerSecond: 0.4186032604542842\nretriedTxPackets: 710\nretriedTxPacketsPerSecond: 0.11960093155836692\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2633\nsuccessfulRxPacketsPerSecond: 0.37541403516931837\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 04:00:09][353548755355782][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 04:00:10][353548755355782][1916 ms][DEBUG] SU: done in 1405 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.104/300.104/300.104/0.000 ms\n [2025-09-06 04:00:10][353548755355782][1916 ms][DEBUG] check_internet: online [2025-09-06 04:00:10][353548755355782][1916 ms][DEBUG] rawBody.length=1160 [2025-09-06 04:00:10][353548755355782][1916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548755355782\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3280\"}'\'' -e'"" [2025-09-06 04:00:10][353548755355782][1916 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:00:10][353548755355782][1916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548755355782\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3280\"}'\'' -e'"" [2025-09-06 04:00:14][353548755355782][6071 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 04:00:14][353548755355782][6228 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=101 [2025-09-06 04:00:14][353548755355782][6228 ms][DEBUG] END runCmdUntilRes#1 in 4312 ms [2025-09-06 04:00:14][353548755355782][6228 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 04:00:15][][0 ms][INFO] === Request start === [2025-09-06 04:00:15][][1 ms][DEBUG] START check_scloud [2025-09-06 04:00:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:00:15][][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 9584 21589 24348948 171100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:00:15][][320 ms][DEBUG] targetPkg: running [2025-09-06 04:00:15][][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 04:00:15][][320 ms][DEBUG] START check_boot_completed [2025-09-06 04:00:15][][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:00:15][][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 04:00:15][][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:00:15][][429 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 04:00:15][][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 04:00:15][][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 04:00:15][][569 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2921\nsuccessfulTxPacketsPerSecond: 0.4186032604542842\nretriedTxPackets: 710\nretriedTxPacketsPerSecond: 0.11960093155836692\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2633\nsuccessfulRxPacketsPerSecond: 0.37541403516931837\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 04:00:15][][569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 04:00:16][][898 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.256/227.256/227.256/0.000 ms\n [2025-09-06 04:00:16][][898 ms][DEBUG] check_internet: online [2025-09-06 04:00:16][][898 ms][DEBUG] rawBody.length=1141 [2025-09-06 04:00:16][][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX837S0PP\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2650\"}'\'' -e'"" [2025-09-06 04:00:16][][898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:00:16][][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX837S0PP\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2650\"}'\'' -e'"" [2025-09-06 04:00:19][][4662 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 04:00:19][][4818 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=101 [2025-09-06 04:00:19][][4818 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-06 04:00:19][][4818 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 04:00:20][353548755355782][0 ms][INFO] === Request start === [2025-09-06 04:00:20][353548755355782][1 ms][DEBUG] START check_scloud [2025-09-06 04:00:20][353548755355782][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:00:20][353548755355782][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 9584 21589 24475164 183020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:00:20][353548755355782][304 ms][DEBUG] targetPkg: running [2025-09-06 04:00:20][353548755355782][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 04:00:20][353548755355782][304 ms][DEBUG] START check_boot_completed [2025-09-06 04:00:20][353548755355782][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:00:20][353548755355782][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 04:00:20][353548755355782][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:00:20][353548755355782][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:00:20][353548755355782][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 04:00:20][353548755355782][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 04:00:20][353548755355782][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2921\nsuccessfulTxPacketsPerSecond: 0.4186032604542842\nretriedTxPackets: 710\nretriedTxPacketsPerSecond: 0.11960093155836692\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2633\nsuccessfulRxPacketsPerSecond: 0.37541403516931837\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 04:00:20][353548755355782][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 04:00:21][353548755355782][835 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.054/226.054/226.054/0.000 ms\n [2025-09-06 04:00:21][353548755355782][835 ms][DEBUG] check_internet: online [2025-09-06 04:00:21][353548755355782][835 ms][DEBUG] rawBody.length=1150 [2025-09-06 04:00:21][353548755355782][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548755355782\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2160\"}'\'' -e'"" [2025-09-06 04:00:21][353548755355782][835 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:00:21][353548755355782][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548755355782\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2160\"}'\'' -e'"" [2025-09-06 04:00:25][353548755355782][4724 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55903f44-b937-484b-92fa-05c60be62b40","id":"QR_55903f44-b937-484b-92fa-05c60be62b40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:00:25][353548755355782][4880 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-09-06 04:00:25][353548755355782][4880 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-06 04:00:25][353548755355782][4881 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:34:03][350753203931100][1 ms][INFO] === Request start === [2025-09-06 04:34:03][350753203931100][1 ms][DEBUG] START check_scloud [2025-09-06 04:34:03][350753203931100][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:34:03][350753203931100][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 9584 21589 24585836 195616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:34:03][350753203931100][305 ms][DEBUG] targetPkg: running [2025-09-06 04:34:03][350753203931100][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 04:34:03][350753203931100][305 ms][DEBUG] START check_boot_completed [2025-09-06 04:34:03][350753203931100][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:34:03][350753203931100][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 04:34:03][350753203931100][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:34:03][350753203931100][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:34:03][350753203931100][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 04:34:03][350753203931100][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 04:34:03][350753203931100][508 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3296\nsuccessfulTxPacketsPerSecond: 0.015597947310133987\nretriedTxPackets: 802\nretriedTxPacketsPerSecond: 0.015597947310133987\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3039\nsuccessfulRxPacketsPerSecond: 0.015597947310133987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 04:34:03][350753203931100][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 04:34:05][350753203931100][1978 ms][DEBUG] SU: done in 1470 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=405 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 405.637/405.637/405.637/0.000 ms\n [2025-09-06 04:34:05][350753203931100][1978 ms][DEBUG] check_internet: online [2025-09-06 04:34:05][350753203931100][1979 ms][DEBUG] rawBody.length=1150 [2025-09-06 04:34:05][350753203931100][1979 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753203931100\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7731\"}'\'' -e'"" [2025-09-06 04:34:05][350753203931100][1979 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:34:05][350753203931100][1979 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753203931100\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7731\"}'\'' -e'"" [2025-09-06 04:34:09][350753203931100][5913 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60248998-fb60-4186-9f37-aa5a04ce627c","id":"QR_60248998-fb60-4186-9f37-aa5a04ce627c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:34:09][350753203931100][6069 ms][DEBUG] proc_open done in 4090 ms; code=255; res.len=3343 [2025-09-06 04:34:09][350753203931100][6069 ms][DEBUG] END runCmdUntilRes#1 in 4091 ms [2025-09-06 04:34:09][350753203931100][6069 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:34:11][350753203931100][0 ms][INFO] === Request start === [2025-09-06 04:34:11][350753203931100][1 ms][DEBUG] START check_scloud [2025-09-06 04:34:11][350753203931100][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:34:12][350753203931100][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 9584 21589 24760128 206152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:34:12][350753203931100][292 ms][DEBUG] targetPkg: running [2025-09-06 04:34:12][350753203931100][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 04:34:12][350753203931100][292 ms][DEBUG] START check_boot_completed [2025-09-06 04:34:12][350753203931100][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:34:12][350753203931100][338 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 04:34:12][350753203931100][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:34:12][350753203931100][401 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 04:34:12][350753203931100][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 04:34:12][350753203931100][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 04:34:12][350753203931100][528 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3296\nsuccessfulTxPacketsPerSecond: 0.015597947310133987\nretriedTxPackets: 802\nretriedTxPacketsPerSecond: 0.015597947310133987\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3039\nsuccessfulRxPacketsPerSecond: 0.015597947310133987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 04:34:12][350753203931100][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 04:34:12][350753203931100][963 ms][DEBUG] SU: done in 435 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=330 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 330.968/330.968/330.968/0.000 ms\n [2025-09-06 04:34:12][350753203931100][963 ms][DEBUG] check_internet: online [2025-09-06 04:34:12][350753203931100][963 ms][DEBUG] rawBody.length=1160 [2025-09-06 04:34:12][350753203931100][963 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753203931100\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4917\"}'\'' -e'"" [2025-09-06 04:34:12][350753203931100][963 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:34:12][350753203931100][963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753203931100\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4917\"}'\'' -e'"" [2025-09-06 04:34:17][350753203931100][6118 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f028067-6d44-4554-b6a6-b27bd2caf360","id":"QR_6f028067-6d44-4554-b6a6-b27bd2caf360","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:34:18][350753203931100][6275 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 04:34:18][350753203931100][6275 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 04:34:18][350753203931100][6275 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:35:07][353310804602569][0 ms][INFO] === Request start === [2025-09-06 04:35:07][353310804602569][1 ms][DEBUG] START check_scloud [2025-09-06 04:35:07][353310804602569][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:35:07][353310804602569][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 9584 21589 24884224 218484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:35:07][353310804602569][298 ms][DEBUG] targetPkg: running [2025-09-06 04:35:07][353310804602569][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 04:35:07][353310804602569][298 ms][DEBUG] START check_boot_completed [2025-09-06 04:35:07][353310804602569][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:35:07][353310804602569][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 04:35:07][353310804602569][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:35:07][353310804602569][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 04:35:07][353310804602569][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 04:35:07][353310804602569][407 ms][DEBUG] rawBody.length=1160 [2025-09-06 04:35:07][353310804602569][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804602569\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2335\"}'\'' -e'"" [2025-09-06 04:35:07][353310804602569][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:35:07][353310804602569][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804602569\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2335\"}'\'' -e'"" [2025-09-06 04:35:12][353310804602569][4890 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7fa995d9-7186-4d8a-b7db-c3750c13d2ca","id":"QR_7fa995d9-7186-4d8a-b7db-c3750c13d2ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:35:12][353310804602569][5046 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-06 04:35:12][353310804602569][5046 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-06 04:35:12][353310804602569][5046 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:43:03][358592104107200][1 ms][INFO] === Request start === [2025-09-06 04:43:03][358592104107200][1 ms][DEBUG] START check_scloud [2025-09-06 04:43:03][358592104107200][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:43:03][358592104107200][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 9584 21589 25009332 229928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:43:03][358592104107200][305 ms][DEBUG] targetPkg: running [2025-09-06 04:43:03][358592104107200][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 04:43:03][358592104107200][305 ms][DEBUG] START check_boot_completed [2025-09-06 04:43:03][358592104107200][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:43:03][358592104107200][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 04:43:03][358592104107200][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:43:03][358592104107200][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:43:03][358592104107200][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 04:43:03][358592104107200][383 ms][DEBUG] rawBody.length=1150 [2025-09-06 04:43:03][358592104107200][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358592104107200\",\"model\":\"SM-N976N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5147\"}'\'' -e'"" [2025-09-06 04:43:03][358592104107200][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:43:03][358592104107200][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358592104107200\",\"model\":\"SM-N976N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5147\"}'\'' -e'"" [2025-09-06 04:43:08][358592104107200][5085 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7c7133a-69e1-412d-83e0-f48d8765a95a","id":"QR_a7c7133a-69e1-412d-83e0-f48d8765a95a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:43:08][358592104107200][5241 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-06 04:43:08][358592104107200][5241 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-06 04:43:08][358592104107200][5241 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:43:10][358592104107200][0 ms][INFO] === Request start === [2025-09-06 04:43:10][358592104107200][1 ms][DEBUG] START check_scloud [2025-09-06 04:43:10][358592104107200][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:43:10][358592104107200][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 9584 21589 25189900 239528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:43:11][358592104107200][292 ms][DEBUG] targetPkg: running [2025-09-06 04:43:11][358592104107200][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 04:43:11][358592104107200][292 ms][DEBUG] START check_boot_completed [2025-09-06 04:43:11][358592104107200][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:43:11][358592104107200][338 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 04:43:11][358592104107200][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:43:11][358592104107200][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:43:11][358592104107200][385 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 04:43:11][358592104107200][385 ms][DEBUG] rawBody.length=1160 [2025-09-06 04:43:11][358592104107200][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358592104107200\",\"model\":\"SM-N976N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2705\"}'\'' -e'"" [2025-09-06 04:43:11][358592104107200][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:43:11][358592104107200][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358592104107200\",\"model\":\"SM-N976N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2705\"}'\'' -e'"" [2025-09-06 04:43:14][358592104107200][4228 ms][DEBUG] proc_open done in 3843 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 04:43:14][358592104107200][4228 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-09-06 04:43:14][358592104107200][4228 ms][WARN] Detected error: Process with pid 9584 either refused to load frida-agent, or terminated during injectionProcess with pid 9584 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 04:43:14][358592104107200][4229 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 04:43:15][358592104107200][4556 ms][DEBUG] SU: done in 328 ms; outsystem 21790 21589 13123024 203488 ep_poll 0 S system_server\n [2025-09-06 04:43:15][358592104107200][4556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 04:43:15][358592104107200][4697 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 04:43:15][358592104107200][4697 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 04:43:15][358592104107200][4697 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 04:43:15][358592104107200][4822 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 04:43:15][358592104107200][4822 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 04:43:15][358592104107200][4993 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 04:43:17][358592104107200][7008 ms][DEBUG] START check_boot_completed [2025-09-06 04:43:17][358592104107200][7009 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:43:17][358592104107200][7056 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 04:43:17][358592104107200][7056 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:43:17][358592104107200][7102 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:43:17][358592104107200][7102 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 04:43:20][358592104107200][10117 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 04:43:20][358592104107200][10117 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358592104107200\",\"model\":\"SM-N976N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2705\"}'\'' -e'"" [2025-09-06 04:43:25][358592104107200][15085 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fbc746bd-77e3-479b-961b-492aa698e0a1","id":"QR_fbc746bd-77e3-479b-961b-492aa698e0a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:43:25][358592104107200][15241 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-06 04:43:25][358592104107200][15241 ms][DEBUG] END runCmdUntilRes#2 in 5124 ms [2025-09-06 04:43:25][358592104107200][15241 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:43:30][353325477701688][0 ms][INFO] === Request start === [2025-09-06 04:43:30][353325477701688][1 ms][DEBUG] START check_scloud [2025-09-06 04:43:30][353325477701688][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:43:30][353325477701688][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 11850 21589 23867616 123620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:43:30][353325477701688][258 ms][DEBUG] targetPkg: running [2025-09-06 04:43:30][353325477701688][258 ms][DEBUG] END check_scloud in 258 ms [2025-09-06 04:43:30][353325477701688][258 ms][DEBUG] START check_boot_completed [2025-09-06 04:43:30][353325477701688][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:43:30][353325477701688][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 04:43:30][353325477701688][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:43:30][353325477701688][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:43:30][353325477701688][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 04:43:30][353325477701688][352 ms][DEBUG] rawBody.length=1150 [2025-09-06 04:43:30][353325477701688][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325477701688\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3896\"}'\'' -e'"" [2025-09-06 04:43:30][353325477701688][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:43:30][353325477701688][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325477701688\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3896\"}'\'' -e'"" [2025-09-06 04:43:34][353325477701688][3898 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bdcdca6a-9b6c-428d-8420-2a7286662857","id":"QR_bdcdca6a-9b6c-428d-8420-2a7286662857","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:43:34][353325477701688][4054 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-06 04:43:34][353325477701688][4054 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-06 04:43:34][353325477701688][4054 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:43:36][353325477701688][0 ms][INFO] === Request start === [2025-09-06 04:43:36][353325477701688][1 ms][DEBUG] START check_scloud [2025-09-06 04:43:36][353325477701688][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:43:36][353325477701688][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 11850 21589 24050228 137360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:43:36][353325477701688][247 ms][DEBUG] targetPkg: running [2025-09-06 04:43:36][353325477701688][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-06 04:43:36][353325477701688][247 ms][DEBUG] START check_boot_completed [2025-09-06 04:43:36][353325477701688][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:43:36][353325477701688][294 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 04:43:36][353325477701688][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:43:36][353325477701688][341 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:43:36][353325477701688][341 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 04:43:36][353325477701688][341 ms][DEBUG] rawBody.length=1160 [2025-09-06 04:43:36][353325477701688][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325477701688\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6542\"}'\'' -e'"" [2025-09-06 04:43:36][353325477701688][341 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:43:36][353325477701688][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325477701688\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6542\"}'\'' -e'"" [2025-09-06 04:43:41][353325477701688][4980 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_95dec17b-d138-4427-8cf8-9df28c0b3633","id":"QR_95dec17b-d138-4427-8cf8-9df28c0b3633","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:43:41][353325477701688][5136 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 04:43:41][353325477701688][5137 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-06 04:43:41][353325477701688][5137 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:50:04][354599262190278][1 ms][INFO] === Request start === [2025-09-06 04:50:04][354599262190278][1 ms][DEBUG] START check_scloud [2025-09-06 04:50:04][354599262190278][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:50:04][354599262190278][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 11850 21589 24039460 149780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:50:04][354599262190278][308 ms][DEBUG] targetPkg: running [2025-09-06 04:50:04][354599262190278][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 04:50:04][354599262190278][308 ms][DEBUG] START check_boot_completed [2025-09-06 04:50:04][354599262190278][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:50:04][354599262190278][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 04:50:04][354599262190278][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:50:04][354599262190278][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:50:04][354599262190278][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 04:50:04][354599262190278][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 04:50:04][354599262190278][498 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3538\nsuccessfulTxPacketsPerSecond: 0.4764713890275446\nretriedTxPackets: 870\nretriedTxPacketsPerSecond: 0.11020426684990828\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3254\nsuccessfulRxPacketsPerSecond: 0.43757576543345933\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 04:50:04][354599262190278][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 04:50:05][354599262190278][1871 ms][DEBUG] SU: done in 1373 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.719/305.719/305.719/0.000 ms\n [2025-09-06 04:50:05][354599262190278][1871 ms][DEBUG] check_internet: online [2025-09-06 04:50:05][354599262190278][1871 ms][DEBUG] rawBody.length=1150 [2025-09-06 04:50:05][354599262190278][1871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354599262190278\",\"model\":\"SM-L705F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3179\"}'\'' -e'"" [2025-09-06 04:50:05][354599262190278][1871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:50:05][354599262190278][1871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354599262190278\",\"model\":\"SM-L705F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3179\"}'\'' -e'"" [2025-09-06 04:50:09][354599262190278][5807 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_198c6261-07b3-4422-a0f6-0dd77604724b","id":"QR_198c6261-07b3-4422-a0f6-0dd77604724b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:50:10][354599262190278][5963 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-09-06 04:50:10][354599262190278][5963 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-06 04:50:10][354599262190278][5963 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:50:12][354599262190278][0 ms][INFO] === Request start === [2025-09-06 04:50:12][354599262190278][1 ms][DEBUG] START check_scloud [2025-09-06 04:50:12][354599262190278][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:50:12][354599262190278][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 11850 21589 24219896 160592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:50:12][354599262190278][248 ms][DEBUG] targetPkg: running [2025-09-06 04:50:12][354599262190278][248 ms][DEBUG] END check_scloud in 247 ms [2025-09-06 04:50:12][354599262190278][248 ms][DEBUG] START check_boot_completed [2025-09-06 04:50:12][354599262190278][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:50:12][354599262190278][279 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 04:50:12][354599262190278][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:50:12][354599262190278][326 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:50:12][354599262190278][326 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 04:50:12][354599262190278][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 04:50:12][354599262190278][435 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3538\nsuccessfulTxPacketsPerSecond: 0.4764713890275446\nretriedTxPackets: 870\nretriedTxPacketsPerSecond: 0.11020426684990828\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3254\nsuccessfulRxPacketsPerSecond: 0.43757576543345933\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 04:50:12][354599262190278][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 04:50:13][354599262190278][763 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.873/227.873/227.873/0.000 ms\n [2025-09-06 04:50:13][354599262190278][764 ms][DEBUG] check_internet: online [2025-09-06 04:50:13][354599262190278][764 ms][DEBUG] rawBody.length=1160 [2025-09-06 04:50:13][354599262190278][764 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354599262190278\",\"model\":\"SM-L705F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1779\"}'\'' -e'"" [2025-09-06 04:50:13][354599262190278][764 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:50:13][354599262190278][764 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354599262190278\",\"model\":\"SM-L705F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1779\"}'\'' -e'"" [2025-09-06 04:50:18][354599262190278][5762 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd6ee9e2-0056-44a1-9304-172912c90202","id":"QR_dd6ee9e2-0056-44a1-9304-172912c90202","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:50:18][354599262190278][5918 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-06 04:50:18][354599262190278][5918 ms][DEBUG] END runCmdUntilRes#1 in 5154 ms [2025-09-06 04:50:18][354599262190278][5918 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:50:23][355824558372052][0 ms][INFO] === Request start === [2025-09-06 04:50:23][355824558372052][1 ms][DEBUG] START check_scloud [2025-09-06 04:50:23][355824558372052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:50:24][355824558372052][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 11850 21589 24365248 171168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:50:24][355824558372052][308 ms][DEBUG] targetPkg: running [2025-09-06 04:50:24][355824558372052][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 04:50:24][355824558372052][308 ms][DEBUG] START check_boot_completed [2025-09-06 04:50:24][355824558372052][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:50:24][355824558372052][353 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 04:50:24][355824558372052][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:50:24][355824558372052][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:50:24][355824558372052][400 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 04:50:24][355824558372052][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 04:50:24][355824558372052][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3538\nsuccessfulTxPacketsPerSecond: 0.4764713890275446\nretriedTxPackets: 870\nretriedTxPacketsPerSecond: 0.11020426684990828\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3254\nsuccessfulRxPacketsPerSecond: 0.43757576543345933\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 04:50:24][355824558372052][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 04:50:24][355824558372052][931 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=319 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 319.688/319.688/319.688/0.000 ms\n [2025-09-06 04:50:24][355824558372052][931 ms][DEBUG] check_internet: online [2025-09-06 04:50:24][355824558372052][931 ms][DEBUG] rawBody.length=1160 [2025-09-06 04:50:24][355824558372052][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558372052\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3419\"}'\'' -e'"" [2025-09-06 04:50:24][355824558372052][932 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:50:24][355824558372052][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558372052\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3419\"}'\'' -e'"" [2025-09-06 04:50:29][355824558372052][5774 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4953a3e6-7014-45ba-88f9-e7e1b371f5a5","id":"QR_4953a3e6-7014-45ba-88f9-e7e1b371f5a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:50:29][355824558372052][5930 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-06 04:50:29][355824558372052][5930 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-06 04:50:29][355824558372052][5930 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 04:55:06][356660712933150][1 ms][INFO] === Request start === [2025-09-06 04:55:06][356660712933150][1 ms][DEBUG] START check_scloud [2025-09-06 04:55:06][356660712933150][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 04:55:06][356660712933150][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 11850 21589 24452444 183224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 04:55:06][356660712933150][303 ms][DEBUG] targetPkg: running [2025-09-06 04:55:06][356660712933150][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 04:55:06][356660712933150][303 ms][DEBUG] START check_boot_completed [2025-09-06 04:55:06][356660712933150][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 04:55:06][356660712933150][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 04:55:06][356660712933150][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 04:55:06][356660712933150][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 04:55:06][356660712933150][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 04:55:06][356660712933150][381 ms][DEBUG] rawBody.length=1170 [2025-09-06 04:55:06][356660712933150][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356660712933150\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9WNA02PV8J\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6886\"}'\'' -e'"" [2025-09-06 04:55:06][356660712933150][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 04:55:06][356660712933150][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356660712933150\",\"model\":\"SM-T500\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9WNA02PV8J\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6886\"}'\'' -e'"" [2025-09-06 04:55:12][356660712933150][6302 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04f09b83-fc0c-45dd-babc-7ce423cda108","id":"QR_04f09b83-fc0c-45dd-babc-7ce423cda108","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 04:55:12][356660712933150][6458 ms][DEBUG] proc_open done in 6077 ms; code=255; res.len=3343 [2025-09-06 04:55:12][356660712933150][6458 ms][DEBUG] END runCmdUntilRes#1 in 6077 ms [2025-09-06 04:55:12][356660712933150][6458 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 05:04:04][353089141293783][1 ms][INFO] === Request start === [2025-09-06 05:04:04][353089141293783][1 ms][DEBUG] START check_scloud [2025-09-06 05:04:04][353089141293783][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 05:04:04][353089141293783][338 ms][DEBUG] SU: done in 336 ms; outu0_a118 11850 21589 24554996 191092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 05:04:04][353089141293783][338 ms][DEBUG] targetPkg: running [2025-09-06 05:04:04][353089141293783][338 ms][DEBUG] END check_scloud in 337 ms [2025-09-06 05:04:04][353089141293783][338 ms][DEBUG] START check_boot_completed [2025-09-06 05:04:04][353089141293783][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 05:04:04][353089141293783][369 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 05:04:04][353089141293783][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 05:04:04][353089141293783][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 05:04:04][353089141293783][416 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 05:04:04][353089141293783][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 05:04:04][353089141293783][541 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3834\nsuccessfulTxPacketsPerSecond: 0.06571381632988335\nretriedTxPackets: 956\nretriedTxPacketsPerSecond: 0.04599967143091835\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3508\nsuccessfulRxPacketsPerSecond: 0.06571381632988335\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 05:04:04][353089141293783][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 05:04:05][353089141293783][1931 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.595/303.595/303.595/0.000 ms\n [2025-09-06 05:04:05][353089141293783][1931 ms][DEBUG] check_internet: online [2025-09-06 05:04:05][353089141293783][1931 ms][DEBUG] rawBody.length=1150 [2025-09-06 05:04:05][353089141293783][1931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353089141293783\",\"model\":\"SM-T736B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7406\"}'\'' -e'"" [2025-09-06 05:04:05][353089141293783][1931 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 05:04:05][353089141293783][1931 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353089141293783\",\"model\":\"SM-T736B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7406\"}'\'' -e'"" [2025-09-06 05:04:10][353089141293783][6102 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c303471-fd99-471f-b2db-e1928403faa6","id":"QR_2c303471-fd99-471f-b2db-e1928403faa6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 05:04:10][353089141293783][6258 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-09-06 05:04:10][353089141293783][6258 ms][DEBUG] END runCmdUntilRes#1 in 4326 ms [2025-09-06 05:04:10][353089141293783][6258 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 05:04:12][353089141293783][0 ms][INFO] === Request start === [2025-09-06 05:04:12][353089141293783][1 ms][DEBUG] START check_scloud [2025-09-06 05:04:12][353089141293783][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 05:04:12][353089141293783][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 11850 21589 24718664 188260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 05:04:12][353089141293783][309 ms][DEBUG] targetPkg: running [2025-09-06 05:04:12][353089141293783][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 05:04:12][353089141293783][309 ms][DEBUG] START check_boot_completed [2025-09-06 05:04:12][353089141293783][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 05:04:12][353089141293783][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 05:04:12][353089141293783][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 05:04:13][353089141293783][450 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 05:04:13][353089141293783][450 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 05:04:13][353089141293783][450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 05:04:13][353089141293783][592 ms][DEBUG] SU: done in 142 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3834\nsuccessfulTxPacketsPerSecond: 0.06571381632988335\nretriedTxPackets: 956\nretriedTxPacketsPerSecond: 0.04599967143091835\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3508\nsuccessfulRxPacketsPerSecond: 0.06571381632988335\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 05:04:13][353089141293783][592 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 05:04:13][353089141293783][997 ms][DEBUG] SU: done in 404 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=314 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 314.686/314.686/314.686/0.000 ms\n [2025-09-06 05:04:13][353089141293783][997 ms][DEBUG] check_internet: online [2025-09-06 05:04:13][353089141293783][997 ms][DEBUG] rawBody.length=1160 [2025-09-06 05:04:13][353089141293783][997 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353089141293783\",\"model\":\"SM-T736B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5666\"}'\'' -e'"" [2025-09-06 05:04:13][353089141293783][997 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 05:04:13][353089141293783][997 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353089141293783\",\"model\":\"SM-T736B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5666\"}'\'' -e'"" [2025-09-06 05:04:18][353089141293783][6261 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7acd2a0e-7031-4bc5-8b46-f9f7de9f64c9","id":"QR_7acd2a0e-7031-4bc5-8b46-f9f7de9f64c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 05:04:19][353089141293783][6417 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 05:04:19][353089141293783][6417 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-06 05:04:19][353089141293783][6417 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 05:08:03][357042144035061][1 ms][INFO] === Request start === [2025-09-06 05:08:03][357042144035061][1 ms][DEBUG] START check_scloud [2025-09-06 05:08:03][357042144035061][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 05:08:04][357042144035061][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 11850 21589 24882724 166216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 05:08:04][357042144035061][300 ms][DEBUG] targetPkg: running [2025-09-06 05:08:04][357042144035061][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 05:08:04][357042144035061][300 ms][DEBUG] START check_boot_completed [2025-09-06 05:08:04][357042144035061][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 05:08:04][357042144035061][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 05:08:04][357042144035061][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 05:08:04][357042144035061][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 05:08:04][357042144035061][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 05:08:04][357042144035061][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 05:08:04][357042144035061][502 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3834\nsuccessfulTxPacketsPerSecond: 0.06571381632988335\nretriedTxPackets: 956\nretriedTxPacketsPerSecond: 0.04599967143091835\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3508\nsuccessfulRxPacketsPerSecond: 0.06571381632988335\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 05:08:04][357042144035061][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 05:08:04][357042144035061][924 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=324 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 324.919/324.919/324.919/0.000 ms\n [2025-09-06 05:08:04][357042144035061][924 ms][DEBUG] check_internet: online [2025-09-06 05:08:04][357042144035061][924 ms][DEBUG] rawBody.length=1150 [2025-09-06 05:08:04][357042144035061][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042144035061\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2780\"}'\'' -e'"" [2025-09-06 05:08:04][357042144035061][925 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 05:08:04][357042144035061][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042144035061\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2780\"}'\'' -e'"" [2025-09-06 05:08:09][357042144035061][5251 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 05:08:09][357042144035061][5407 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=101 [2025-09-06 05:08:09][357042144035061][5408 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-06 05:08:09][357042144035061][5408 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 05:08:09][][0 ms][INFO] === Request start === [2025-09-06 05:08:09][][1 ms][DEBUG] START check_scloud [2025-09-06 05:08:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 05:08:09][][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 11850 21589 25037612 164992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 05:08:09][][295 ms][DEBUG] targetPkg: running [2025-09-06 05:08:09][][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 05:08:09][][295 ms][DEBUG] START check_boot_completed [2025-09-06 05:08:09][][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 05:08:09][][341 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 05:08:09][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 05:08:09][][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 05:08:09][][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 05:08:09][][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 05:08:10][][498 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3834\nsuccessfulTxPacketsPerSecond: 0.06571381632988335\nretriedTxPackets: 956\nretriedTxPacketsPerSecond: 0.04599967143091835\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3508\nsuccessfulRxPacketsPerSecond: 0.06571381632988335\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 05:08:10][][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 05:08:10][][857 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.037/223.037/223.037/0.000 ms\n [2025-09-06 05:08:10][][857 ms][DEBUG] check_internet: online [2025-09-06 05:08:10][][857 ms][DEBUG] rawBody.length=1131 [2025-09-06 05:08:10][][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX40MJ1NJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6553\"}'\'' -e'"" [2025-09-06 05:08:10][][857 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 05:08:10][][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX40MJ1NJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6553\"}'\'' -e'"" [2025-09-06 05:08:13][][4106 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 05:08:13][][4262 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=101 [2025-09-06 05:08:13][][4262 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-09-06 05:08:13][][4262 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 05:08:15][357042144035061][0 ms][INFO] === Request start === [2025-09-06 05:08:15][357042144035061][1 ms][DEBUG] START check_scloud [2025-09-06 05:08:15][357042144035061][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 05:08:15][357042144035061][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 11850 21589 25202744 175884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 05:08:15][357042144035061][301 ms][DEBUG] targetPkg: running [2025-09-06 05:08:15][357042144035061][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 05:08:15][357042144035061][301 ms][DEBUG] START check_boot_completed [2025-09-06 05:08:15][357042144035061][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 05:08:15][357042144035061][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 05:08:15][357042144035061][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 05:08:15][357042144035061][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 05:08:15][357042144035061][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 05:08:15][357042144035061][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 05:08:15][357042144035061][504 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3834\nsuccessfulTxPacketsPerSecond: 0.06571381632988335\nretriedTxPackets: 956\nretriedTxPacketsPerSecond: 0.04599967143091835\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3508\nsuccessfulRxPacketsPerSecond: 0.06571381632988335\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 05:08:15][357042144035061][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 05:08:16][357042144035061][832 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.765/226.765/226.765/0.000 ms\n [2025-09-06 05:08:16][357042144035061][832 ms][DEBUG] check_internet: online [2025-09-06 05:08:16][357042144035061][832 ms][DEBUG] rawBody.length=1160 [2025-09-06 05:08:16][357042144035061][832 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042144035061\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6864\"}'\'' -e'"" [2025-09-06 05:08:16][357042144035061][832 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 05:08:16][357042144035061][832 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042144035061\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6864\"}'\'' -e'"" [2025-09-06 05:08:20][357042144035061][4784 ms][DEBUG] proc_open done in 3952 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 05:08:20][357042144035061][4785 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-06 05:08:20][357042144035061][4785 ms][WARN] Detected error: Process with pid 11850 either refused to load frida-agent, or terminated during injectionProcess with pid 11850 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 05:08:20][357042144035061][4785 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 05:08:20][357042144035061][5050 ms][DEBUG] SU: done in 265 ms; outsystem 21790 21589 13032112 196508 ep_poll 0 S system_server\n [2025-09-06 05:08:20][357042144035061][5050 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 05:08:20][357042144035061][5191 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 05:08:20][357042144035061][5191 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 05:08:20][357042144035061][5191 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 05:08:20][357042144035061][5362 ms][DEBUG] SU: done in 171 ms; out [2025-09-06 05:08:20][357042144035061][5362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 05:08:21][357042144035061][5581 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 05:08:23][357042144035061][7596 ms][DEBUG] START check_boot_completed [2025-09-06 05:08:23][357042144035061][7596 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 05:08:23][357042144035061][7643 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 05:08:23][357042144035061][7643 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 05:08:23][357042144035061][7690 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 05:08:23][357042144035061][7690 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 05:08:26][357042144035061][10705 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 05:08:26][357042144035061][10705 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042144035061\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6864\"}'\'' -e'"" [2025-09-06 05:08:31][357042144035061][15610 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_076751b5-f5a9-4ab3-ad91-429295b7d552","id":"QR_076751b5-f5a9-4ab3-ad91-429295b7d552","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 05:08:31][357042144035061][15766 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-06 05:08:31][357042144035061][15766 ms][DEBUG] END runCmdUntilRes#2 in 5062 ms [2025-09-06 05:08:31][357042144035061][15766 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 05:31:06][352549935622761][1 ms][INFO] === Request start === [2025-09-06 05:31:06][352549935622761][1 ms][DEBUG] START check_scloud [2025-09-06 05:31:06][352549935622761][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 05:31:07][352549935622761][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 14525 21589 23797276 127372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 05:31:07][352549935622761][306 ms][DEBUG] targetPkg: running [2025-09-06 05:31:07][352549935622761][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 05:31:07][352549935622761][306 ms][DEBUG] START check_boot_completed [2025-09-06 05:31:07][352549935622761][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 05:31:07][352549935622761][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 05:31:07][352549935622761][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 05:31:07][352549935622761][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 05:31:07][352549935622761][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 05:31:07][352549935622761][400 ms][DEBUG] rawBody.length=1160 [2025-09-06 05:31:07][352549935622761][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549935622761\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8471\"}'\'' -e'"" [2025-09-06 05:31:07][352549935622761][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 05:31:07][352549935622761][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549935622761\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8471\"}'\'' -e'"" [2025-09-06 05:31:12][352549935622761][5742 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d315188b-7f68-4d01-bcf3-cdc0fa56a1b4","id":"QR_d315188b-7f68-4d01-bcf3-cdc0fa56a1b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 05:31:12][352549935622761][5898 ms][DEBUG] proc_open done in 5499 ms; code=255; res.len=3343 [2025-09-06 05:31:12][352549935622761][5898 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-09-06 05:31:12][352549935622761][5898 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 05:46:03][352908917239780][1 ms][INFO] === Request start === [2025-09-06 05:46:03][352908917239780][1 ms][DEBUG] START check_scloud [2025-09-06 05:46:03][352908917239780][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 05:46:04][352908917239780][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 14525 21589 23909056 138940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 05:46:04][352908917239780][302 ms][DEBUG] targetPkg: running [2025-09-06 05:46:04][352908917239780][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 05:46:04][352908917239780][302 ms][DEBUG] START check_boot_completed [2025-09-06 05:46:04][352908917239780][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 05:46:04][352908917239780][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 05:46:04][352908917239780][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 05:46:04][352908917239780][411 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 05:46:04][352908917239780][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 05:46:04][352908917239780][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 05:46:04][352908917239780][536 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4051\nsuccessfulTxPacketsPerSecond: 0.013296723022611078\nretriedTxPackets: 1048\nretriedTxPacketsPerSecond: 0.013296723022611078\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3694\nsuccessfulRxPacketsPerSecond: 0.013296723022611078\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 05:46:04][352908917239780][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 05:46:06][352908917239780][2536 ms][DEBUG] SU: done in 2000 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.055/300.055/300.055/0.000 ms\n [2025-09-06 05:46:06][352908917239780][2536 ms][DEBUG] check_internet: online [2025-09-06 05:46:06][352908917239780][2536 ms][DEBUG] rawBody.length=1150 [2025-09-06 05:46:06][352908917239780][2536 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352908917239780\",\"model\":\"SM-F936B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1018\"}'\'' -e'"" [2025-09-06 05:46:06][352908917239780][2536 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 05:46:06][352908917239780][2536 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352908917239780\",\"model\":\"SM-F936B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1018\"}'\'' -e'"" [2025-09-06 05:46:10][352908917239780][6660 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e753c7b-7991-423c-9ce2-235d2511dbe1","id":"QR_6e753c7b-7991-423c-9ce2-235d2511dbe1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 05:46:10][352908917239780][6816 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-09-06 05:46:10][352908917239780][6816 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-06 05:46:10][352908917239780][6816 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 05:46:13][352908917239780][0 ms][INFO] === Request start === [2025-09-06 05:46:13][352908917239780][1 ms][DEBUG] START check_scloud [2025-09-06 05:46:13][352908917239780][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 05:46:13][352908917239780][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 14525 21589 24048404 150460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 05:46:13][352908917239780][315 ms][DEBUG] targetPkg: running [2025-09-06 05:46:13][352908917239780][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 05:46:13][352908917239780][315 ms][DEBUG] START check_boot_completed [2025-09-06 05:46:13][352908917239780][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 05:46:13][352908917239780][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 05:46:13][352908917239780][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 05:46:13][352908917239780][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 05:46:13][352908917239780][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 05:46:13][352908917239780][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 05:46:13][352908917239780][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4051\nsuccessfulTxPacketsPerSecond: 0.013296723022611078\nretriedTxPackets: 1048\nretriedTxPacketsPerSecond: 0.013296723022611078\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3694\nsuccessfulRxPacketsPerSecond: 0.013296723022611078\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 05:46:13][352908917239780][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 05:46:13][352908917239780][893 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=271 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 271.512/271.512/271.512/0.000 ms\n [2025-09-06 05:46:13][352908917239780][893 ms][DEBUG] check_internet: online [2025-09-06 05:46:13][352908917239780][893 ms][DEBUG] rawBody.length=1160 [2025-09-06 05:46:13][352908917239780][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352908917239780\",\"model\":\"SM-F936B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1949\"}'\'' -e'"" [2025-09-06 05:46:13][352908917239780][893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 05:46:13][352908917239780][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352908917239780\",\"model\":\"SM-F936B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1949\"}'\'' -e'"" [2025-09-06 05:46:18][352908917239780][5845 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9590c577-5c5c-4bf6-8880-a02866dcdc50","id":"QR_9590c577-5c5c-4bf6-8880-a02866dcdc50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 05:46:19][352908917239780][6001 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-06 05:46:19][352908917239780][6001 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 05:46:19][352908917239780][6001 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 05:58:03][358141431819861][1 ms][INFO] === Request start === [2025-09-06 05:58:03][358141431819861][1 ms][DEBUG] START check_scloud [2025-09-06 05:58:03][358141431819861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 05:58:04][358141431819861][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 14525 21589 24140552 161884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 05:58:04][358141431819861][310 ms][DEBUG] targetPkg: running [2025-09-06 05:58:04][358141431819861][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 05:58:04][358141431819861][310 ms][DEBUG] START check_boot_completed [2025-09-06 05:58:04][358141431819861][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 05:58:04][358141431819861][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 05:58:04][358141431819861][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 05:58:04][358141431819861][404 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 05:58:04][358141431819861][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 05:58:04][358141431819861][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 05:58:04][358141431819861][529 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4127\nsuccessfulTxPacketsPerSecond: 0.03368666906216264\nretriedTxPackets: 1083\nretriedTxPacketsPerSecond: 0.033686669062162215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3757\nsuccessfulRxPacketsPerSecond: 0.022457779374774674\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 05:58:04][358141431819861][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 05:58:05][358141431819861][1919 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.071/300.071/300.071/0.000 ms\n [2025-09-06 05:58:05][358141431819861][1919 ms][DEBUG] check_internet: online [2025-09-06 05:58:05][358141431819861][1919 ms][DEBUG] rawBody.length=1150 [2025-09-06 05:58:05][358141431819861][1919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141431819861\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9382\"}'\'' -e'"" [2025-09-06 05:58:05][358141431819861][1920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 05:58:05][358141431819861][1920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141431819861\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9382\"}'\'' -e'"" [2025-09-06 05:58:09][358141431819861][5824 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6af276f8-0dc3-4034-9fe9-f01253f5ca86","id":"QR_6af276f8-0dc3-4034-9fe9-f01253f5ca86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 05:58:09][358141431819861][5981 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-06 05:58:09][358141431819861][5981 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-06 05:58:09][358141431819861][5981 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 05:58:12][358141431819861][0 ms][INFO] === Request start === [2025-09-06 05:58:12][358141431819861][1 ms][DEBUG] START check_scloud [2025-09-06 05:58:12][358141431819861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 05:58:12][358141431819861][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 14525 21589 24335388 172696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 05:58:12][358141431819861][289 ms][DEBUG] targetPkg: running [2025-09-06 05:58:12][358141431819861][289 ms][DEBUG] END check_scloud in 289 ms [2025-09-06 05:58:12][358141431819861][289 ms][DEBUG] START check_boot_completed [2025-09-06 05:58:12][358141431819861][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 05:58:12][358141431819861][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 05:58:12][358141431819861][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 05:58:12][358141431819861][398 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 05:58:12][358141431819861][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 05:58:12][358141431819861][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 05:58:12][358141431819861][523 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4127\nsuccessfulTxPacketsPerSecond: 0.03368666906216264\nretriedTxPackets: 1083\nretriedTxPacketsPerSecond: 0.033686669062162215\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3757\nsuccessfulRxPacketsPerSecond: 0.022457779374774674\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 05:58:12][358141431819861][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 05:58:13][358141431819861][883 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.704/227.704/227.704/0.000 ms\n [2025-09-06 05:58:13][358141431819861][883 ms][DEBUG] check_internet: online [2025-09-06 05:58:13][358141431819861][883 ms][DEBUG] rawBody.length=1160 [2025-09-06 05:58:13][358141431819861][883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141431819861\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5022\"}'\'' -e'"" [2025-09-06 05:58:13][358141431819861][883 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 05:58:13][358141431819861][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141431819861\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5022\"}'\'' -e'"" [2025-09-06 05:58:18][358141431819861][6147 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f5a5fbac-d737-4d91-b336-c23d1e851478","id":"QR_f5a5fbac-d737-4d91-b336-c23d1e851478","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 05:58:18][358141431819861][6303 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 05:58:18][358141431819861][6303 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-06 05:58:18][358141431819861][6303 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:00:09][352549935622761][1 ms][INFO] === Request start === [2025-09-06 06:00:09][352549935622761][1 ms][DEBUG] START check_scloud [2025-09-06 06:00:09][352549935622761][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:00:09][352549935622761][275 ms][DEBUG] SU: done in 273 ms; outu0_a118 14525 21589 24465628 149932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:00:09][352549935622761][275 ms][DEBUG] targetPkg: running [2025-09-06 06:00:09][352549935622761][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-06 06:00:09][352549935622761][275 ms][DEBUG] START check_boot_completed [2025-09-06 06:00:09][352549935622761][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:00:09][352549935622761][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:00:09][352549935622761][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:00:09][352549935622761][384 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 06:00:09][352549935622761][384 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 06:00:09][352549935622761][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:00:09][352549935622761][524 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4240\nsuccessfulTxPacketsPerSecond: 0.3738528012492639\nretriedTxPackets: 1114\nretriedTxPacketsPerSecond: 0.10256138795333787\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3862\nsuccessfulRxPacketsPerSecond: 0.34738534629356377\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:00:09][352549935622761][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:00:10][352549935622761][978 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=349 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 349.239/349.239/349.239/0.000 ms\n [2025-09-06 06:00:10][352549935622761][978 ms][DEBUG] check_internet: online [2025-09-06 06:00:10][352549935622761][978 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:00:10][352549935622761][978 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549935622761\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4531\"}'\'' -e'"" [2025-09-06 06:00:10][352549935622761][978 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:00:10][352549935622761][978 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549935622761\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4531\"}'\'' -e'"" [2025-09-06 06:00:15][352549935622761][5976 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f880469-b1a2-4376-ab04-7a8b84fa223b","id":"QR_0f880469-b1a2-4376-ab04-7a8b84fa223b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:00:15][352549935622761][6132 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-06 06:00:15][352549935622761][6132 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-06 06:00:15][352549935622761][6133 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:24:03][353310802292546][1 ms][INFO] === Request start === [2025-09-06 06:24:03][353310802292546][1 ms][DEBUG] START check_scloud [2025-09-06 06:24:03][353310802292546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:24:03][353310802292546][330 ms][DEBUG] SU: done in 328 ms; outu0_a118 14525 21589 24611060 139632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:24:03][353310802292546][330 ms][DEBUG] targetPkg: running [2025-09-06 06:24:03][353310802292546][330 ms][DEBUG] END check_scloud in 329 ms [2025-09-06 06:24:03][353310802292546][330 ms][DEBUG] START check_boot_completed [2025-09-06 06:24:03][353310802292546][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:24:03][353310802292546][361 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 06:24:03][353310802292546][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:24:03][353310802292546][409 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 06:24:03][353310802292546][410 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-06 06:24:03][353310802292546][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:24:04][353310802292546][517 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4702\nsuccessfulTxPacketsPerSecond: 0.02021427127552052\nretriedTxPackets: 1190\nretriedTxPacketsPerSecond: 0.013476180850347012\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4273\nsuccessfulRxPacketsPerSecond: 0.02358331648810727\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:24:04][353310802292546][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:24:05][353310802292546][1986 ms][DEBUG] SU: done in 1468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=405 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 405.532/405.532/405.532/0.000 ms\n [2025-09-06 06:24:05][353310802292546][1986 ms][DEBUG] check_internet: online [2025-09-06 06:24:05][353310802292546][1986 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:24:05][353310802292546][1986 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310802292546\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3513\"}'\'' -e'"" [2025-09-06 06:24:05][353310802292546][1986 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:24:05][353310802292546][1986 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310802292546\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3513\"}'\'' -e'"" [2025-09-06 06:24:09][353310802292546][6078 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62b1def5-2196-43f4-bb38-0408f40fef22","id":"QR_62b1def5-2196-43f4-bb38-0408f40fef22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:24:09][353310802292546][6234 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-09-06 06:24:09][353310802292546][6234 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-09-06 06:24:09][353310802292546][6234 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:24:12][353310802292546][1 ms][INFO] === Request start === [2025-09-06 06:24:12][353310802292546][1 ms][DEBUG] START check_scloud [2025-09-06 06:24:12][353310802292546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:24:12][353310802292546][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 14525 21589 24775240 149384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:24:12][353310802292546][323 ms][DEBUG] targetPkg: running [2025-09-06 06:24:12][353310802292546][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 06:24:12][353310802292546][323 ms][DEBUG] START check_boot_completed [2025-09-06 06:24:12][353310802292546][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:24:12][353310802292546][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:24:12][353310802292546][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:24:12][353310802292546][417 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:24:12][353310802292546][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 06:24:12][353310802292546][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:24:12][353310802292546][542 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4702\nsuccessfulTxPacketsPerSecond: 0.02021427127552052\nretriedTxPackets: 1190\nretriedTxPacketsPerSecond: 0.013476180850347012\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4273\nsuccessfulRxPacketsPerSecond: 0.02358331648810727\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:24:12][353310802292546][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:24:13][353310802292546][995 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=321 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 321.026/321.026/321.026/0.000 ms\n [2025-09-06 06:24:13][353310802292546][995 ms][DEBUG] check_internet: online [2025-09-06 06:24:13][353310802292546][995 ms][DEBUG] rawBody.length=1160 [2025-09-06 06:24:13][353310802292546][995 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310802292546\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4965\"}'\'' -e'"" [2025-09-06 06:24:13][353310802292546][995 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:24:13][353310802292546][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310802292546\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4965\"}'\'' -e'"" [2025-09-06 06:24:18][353310802292546][6056 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09970d3a-13b6-4f42-9860-16426f66bb8b","id":"QR_09970d3a-13b6-4f42-9860-16426f66bb8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:24:18][353310802292546][6212 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 06:24:18][353310802292546][6212 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 06:24:18][353310802292546][6212 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:26:03][350389911540717][0 ms][INFO] === Request start === [2025-09-06 06:26:03][350389911540717][1 ms][DEBUG] START check_scloud [2025-09-06 06:26:03][350389911540717][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:26:04][350389911540717][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 14525 21589 24885000 159716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:26:04][350389911540717][315 ms][DEBUG] targetPkg: running [2025-09-06 06:26:04][350389911540717][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 06:26:04][350389911540717][315 ms][DEBUG] START check_boot_completed [2025-09-06 06:26:04][350389911540717][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:26:04][350389911540717][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:26:04][350389911540717][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:26:04][350389911540717][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:26:04][350389911540717][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 06:26:04][350389911540717][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:26:04][350389911540717][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4702\nsuccessfulTxPacketsPerSecond: 0.02021427127552052\nretriedTxPackets: 1190\nretriedTxPacketsPerSecond: 0.013476180850347012\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4273\nsuccessfulRxPacketsPerSecond: 0.02358331648810727\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:26:04][350389911540717][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:26:04][350389911540717][908 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.220/253.220/253.220/0.000 ms\n [2025-09-06 06:26:04][350389911540717][908 ms][DEBUG] check_internet: online [2025-09-06 06:26:04][350389911540717][908 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:26:04][350389911540717][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350389911540717\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9678\"}'\'' -e'"" [2025-09-06 06:26:04][350389911540717][908 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:26:04][350389911540717][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350389911540717\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9678\"}'\'' -e'"" [2025-09-06 06:26:09][350389911540717][5907 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3cc9efd-88c1-472a-af79-f51cd3f83f1a","id":"QR_e3cc9efd-88c1-472a-af79-f51cd3f83f1a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:26:09][350389911540717][6063 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-06 06:26:09][350389911540717][6063 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-06 06:26:09][350389911540717][6063 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:26:12][350389911540717][0 ms][INFO] === Request start === [2025-09-06 06:26:12][350389911540717][1 ms][DEBUG] START check_scloud [2025-09-06 06:26:12][350389911540717][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:26:12][350389911540717][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 14525 21589 25064464 171344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:26:12][350389911540717][318 ms][DEBUG] targetPkg: running [2025-09-06 06:26:12][350389911540717][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 06:26:12][350389911540717][318 ms][DEBUG] START check_boot_completed [2025-09-06 06:26:12][350389911540717][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:26:12][350389911540717][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:26:12][350389911540717][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:26:12][350389911540717][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:26:12][350389911540717][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 06:26:12][350389911540717][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:26:12][350389911540717][505 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4702\nsuccessfulTxPacketsPerSecond: 0.02021427127552052\nretriedTxPackets: 1190\nretriedTxPacketsPerSecond: 0.013476180850347012\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4273\nsuccessfulRxPacketsPerSecond: 0.02358331648810727\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:26:12][350389911540717][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:26:13][350389911540717][896 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.194/294.194/294.194/0.000 ms\n [2025-09-06 06:26:13][350389911540717][896 ms][DEBUG] check_internet: online [2025-09-06 06:26:13][350389911540717][896 ms][DEBUG] rawBody.length=1160 [2025-09-06 06:26:13][350389911540717][896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350389911540717\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5577\"}'\'' -e'"" [2025-09-06 06:26:13][350389911540717][896 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:26:13][350389911540717][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350389911540717\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5577\"}'\'' -e'"" [2025-09-06 06:26:18][350389911540717][6347 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12f44e71-f7c9-4aea-bc95-fe04014c25c8","id":"QR_12f44e71-f7c9-4aea-bc95-fe04014c25c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:26:18][350389911540717][6503 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-09-06 06:26:18][350389911540717][6503 ms][DEBUG] END runCmdUntilRes#1 in 5607 ms [2025-09-06 06:26:18][350389911540717][6503 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:36:04][357651718219453][1 ms][INFO] === Request start === [2025-09-06 06:36:04][357651718219453][1 ms][DEBUG] START check_scloud [2025-09-06 06:36:04][357651718219453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:36:05][357651718219453][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 14525 21589 25153672 182580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:36:05][357651718219453][257 ms][DEBUG] targetPkg: running [2025-09-06 06:36:05][357651718219453][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-06 06:36:05][357651718219453][257 ms][DEBUG] START check_boot_completed [2025-09-06 06:36:05][357651718219453][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:36:05][357651718219453][304 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 06:36:05][357651718219453][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:36:05][357651718219453][352 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 06:36:05][357651718219453][352 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 06:36:05][357651718219453][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:36:05][357651718219453][476 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=4327091 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4833\nsuccessfulTxPacketsPerSecond: 0.054360566844810776\nretriedTxPackets: 1240\nretriedTxPacketsPerSecond: 0.04756549598920943\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4383\nsuccessfulRxPacketsPerSecond: 0.027180283422405388\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:36:05][357651718219453][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:36:06][357651718219453][1803 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.914/300.914/300.914/0.000 ms\n [2025-09-06 06:36:06][357651718219453][1803 ms][DEBUG] check_internet: online [2025-09-06 06:36:06][357651718219453][1804 ms][DEBUG] rawBody.length=1160 [2025-09-06 06:36:06][357651718219453][1804 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718219453\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5058\"}'\'' -e'"" [2025-09-06 06:36:06][357651718219453][1804 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:36:06][357651718219453][1804 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718219453\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5058\"}'\'' -e'"" [2025-09-06 06:36:10][357651718219453][5631 ms][DEBUG] proc_open done in 3827 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 06:36:10][357651718219453][5631 ms][DEBUG] END runCmdUntilRes#1 in 3828 ms [2025-09-06 06:36:10][357651718219453][5631 ms][WARN] Detected error: Process with pid 14525 either refused to load frida-agent, or terminated during injectionProcess with pid 14525 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 06:36:10][357651718219453][5631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 06:36:10][357651718219453][5928 ms][DEBUG] SU: done in 296 ms; outsystem 18405 1 12792480 125484 ptrace_stop 0 t system_server\nsystem 21790 21589 13124688 211256 ep_poll 0 S system_server\n [2025-09-06 06:36:10][357651718219453][5928 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 06:36:11][357651718219453][6068 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 06:36:11][357651718219453][6068 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 06:36:11][357651718219453][6068 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 06:36:11][357651718219453][6209 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 06:36:11][357651718219453][6209 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 06:36:11][357651718219453][6381 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 06:36:13][357651718219453][8396 ms][DEBUG] START check_boot_completed [2025-09-06 06:36:13][357651718219453][8396 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:36:13][357651718219453][8442 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 06:36:13][357651718219453][8443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:36:13][357651718219453][8489 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:36:13][357651718219453][8489 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 06:36:16][357651718219453][11504 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 06:36:16][357651718219453][11504 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718219453\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5058\"}'\'' -e'"" [2025-09-06 06:36:16][357651718219453][12020 ms][DEBUG] proc_open done in 515 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-06 06:36:16][357651718219453][12020 ms][DEBUG] END runCmdUntilRes#2 in 516 ms [2025-09-06 06:36:16][357651718219453][12020 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-06 06:36:16][357651718219453][12020 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 06:36:17][357651718219453][12285 ms][DEBUG] SU: done in 265 ms; out [2025-09-06 06:37:04][357651718219453][0 ms][INFO] === Request start === [2025-09-06 06:37:04][357651718219453][1 ms][DEBUG] START check_scloud [2025-09-06 06:37:04][357651718219453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:37:04][357651718219453][364 ms][DEBUG] SU: done in 363 ms; out [2025-09-06 06:37:04][357651718219453][364 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 06:37:04][357651718219453][410 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 06:37:04][357651718219453][410 ms][DEBUG] check_devices: device found [2025-09-06 06:37:04][357651718219453][410 ms][WARN] targetPkg: not running, restarting [2025-09-06 06:37:04][357651718219453][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 06:37:04][357651718219453][535 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 06:37:04][357651718219453][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 06:37:05][357651718219453][801 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 06:37:07][357651718219453][2816 ms][DEBUG] END check_scloud in 2815 ms [2025-09-06 06:37:07][357651718219453][2816 ms][DEBUG] START check_boot_completed [2025-09-06 06:37:07][357651718219453][2816 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:37:07][357651718219453][2863 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 06:37:07][357651718219453][2863 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:37:07][357651718219453][2941 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 06:37:07][357651718219453][2941 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 06:37:07][357651718219453][2941 ms][DEBUG] rawBody.length=1160 [2025-09-06 06:37:07][357651718219453][2941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718219453\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4578\"}'\'' -e'"" [2025-09-06 06:37:07][357651718219453][2942 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:37:07][357651718219453][2942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718219453\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4578\"}'\'' -e'"" [2025-09-06 06:37:14][357651718219453][9892 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a1dc11c-3e76-4ab0-a3a0-f69e686b3ccc","id":"QR_9a1dc11c-3e76-4ab0-a3a0-f69e686b3ccc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:37:14][357651718219453][10049 ms][DEBUG] proc_open done in 7107 ms; code=255; res.len=3343 [2025-09-06 06:37:14][357651718219453][10049 ms][DEBUG] END runCmdUntilRes#1 in 7107 ms [2025-09-06 06:37:14][357651718219453][10049 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:37:17][357651718219453][0 ms][INFO] === Request start === [2025-09-06 06:37:17][357651718219453][1 ms][DEBUG] START check_scloud [2025-09-06 06:37:17][357651718219453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:37:18][357651718219453][368 ms][DEBUG] SU: done in 367 ms; outu0_a118 23240 18684 23878592 110932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:37:18][357651718219453][368 ms][DEBUG] targetPkg: running [2025-09-06 06:37:18][357651718219453][368 ms][DEBUG] END check_scloud in 367 ms [2025-09-06 06:37:18][357651718219453][368 ms][DEBUG] START check_boot_completed [2025-09-06 06:37:18][357651718219453][368 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:37:18][357651718219453][414 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 06:37:18][357651718219453][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:37:18][357651718219453][492 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 06:37:18][357651718219453][493 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 06:37:18][357651718219453][493 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:37:18][357651718219453][493 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718219453\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2177\"}'\'' -e'"" [2025-09-06 06:37:18][357651718219453][493 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:37:18][357651718219453][493 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651718219453\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2177\"}'\'' -e'"" [2025-09-06 06:37:23][357651718219453][5772 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c98f0d40-67de-48e3-a4c8-f296783ce553","id":"QR_c98f0d40-67de-48e3-a4c8-f296783ce553","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:37:23][357651718219453][5928 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-09-06 06:37:23][357651718219453][5929 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-06 06:37:23][357651718219453][5929 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:37:27][352177395977705][0 ms][INFO] === Request start === [2025-09-06 06:37:27][352177395977705][1 ms][DEBUG] START check_scloud [2025-09-06 06:37:27][352177395977705][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:37:27][352177395977705][359 ms][DEBUG] SU: done in 358 ms; outu0_a118 23240 18684 24036692 92844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:37:27][352177395977705][359 ms][DEBUG] targetPkg: running [2025-09-06 06:37:27][352177395977705][359 ms][DEBUG] END check_scloud in 358 ms [2025-09-06 06:37:27][352177395977705][359 ms][DEBUG] START check_boot_completed [2025-09-06 06:37:27][352177395977705][359 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:37:27][352177395977705][406 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 06:37:27][352177395977705][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:37:27][352177395977705][468 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 06:37:27][352177395977705][468 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 06:37:27][352177395977705][468 ms][DEBUG] rawBody.length=1160 [2025-09-06 06:37:27][352177395977705][468 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177395977705\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4717\"}'\'' -e'"" [2025-09-06 06:37:27][352177395977705][468 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:37:27][352177395977705][468 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177395977705\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4717\"}'\'' -e'"" [2025-09-06 06:37:33][352177395977705][6060 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e75a4ef6-f60b-44a1-8a92-06af95793800","id":"QR_e75a4ef6-f60b-44a1-8a92-06af95793800","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:37:33][352177395977705][6217 ms][DEBUG] proc_open done in 5748 ms; code=255; res.len=3343 [2025-09-06 06:37:33][352177395977705][6217 ms][DEBUG] END runCmdUntilRes#1 in 5749 ms [2025-09-06 06:37:33][352177395977705][6217 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:37:36][352177395977705][0 ms][INFO] === Request start === [2025-09-06 06:37:36][352177395977705][1 ms][DEBUG] START check_scloud [2025-09-06 06:37:36][352177395977705][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:37:37][352177395977705][394 ms][DEBUG] SU: done in 393 ms; outu0_a118 23240 18684 24070152 82244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:37:37][352177395977705][394 ms][DEBUG] targetPkg: running [2025-09-06 06:37:37][352177395977705][394 ms][DEBUG] END check_scloud in 393 ms [2025-09-06 06:37:37][352177395977705][394 ms][DEBUG] START check_boot_completed [2025-09-06 06:37:37][352177395977705][394 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:37:37][352177395977705][441 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 06:37:37][352177395977705][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:37:37][352177395977705][487 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:37:37][352177395977705][487 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 06:37:37][352177395977705][487 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:37:37][352177395977705][487 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177395977705\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1689\"}'\'' -e'"" [2025-09-06 06:37:37][352177395977705][487 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:37:37][352177395977705][487 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177395977705\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1689\"}'\'' -e'"" [2025-09-06 06:37:41][352177395977705][4877 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2dd9c642-7b35-4a08-806b-83e8742a872b","id":"QR_2dd9c642-7b35-4a08-806b-83e8742a872b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:37:41][352177395977705][5033 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3343 [2025-09-06 06:37:41][352177395977705][5033 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-09-06 06:37:41][352177395977705][5034 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:40:05][353494117124063][1 ms][INFO] === Request start === [2025-09-06 06:40:05][353494117124063][1 ms][DEBUG] START check_scloud [2025-09-06 06:40:05][353494117124063][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:40:05][353494117124063][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 23240 18684 24166552 66368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:40:05][353494117124063][284 ms][DEBUG] targetPkg: running [2025-09-06 06:40:05][353494117124063][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-06 06:40:05][353494117124063][284 ms][DEBUG] START check_boot_completed [2025-09-06 06:40:05][353494117124063][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:40:05][353494117124063][314 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 06:40:05][353494117124063][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:40:05][353494117124063][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:40:05][353494117124063][361 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 06:40:05][353494117124063][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:40:05][353494117124063][486 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 288\nsuccessfulTxPacketsPerSecond: 4.932599993638082\nretriedTxPackets: 44\nretriedTxPacketsPerSecond: 1.2039008086640999\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 257\nsuccessfulRxPacketsPerSecond: 4.333826299779285\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:40:05][353494117124063][486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:40:07][353494117124063][2126 ms][DEBUG] SU: done in 1640 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.638/301.638/301.638/0.000 ms\n [2025-09-06 06:40:07][353494117124063][2126 ms][DEBUG] check_internet: online [2025-09-06 06:40:07][353494117124063][2126 ms][DEBUG] rawBody.length=1160 [2025-09-06 06:40:07][353494117124063][2126 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494117124063\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7132\"}'\'' -e'"" [2025-09-06 06:40:07][353494117124063][2126 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:40:07][353494117124063][2126 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494117124063\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7132\"}'\'' -e'"" [2025-09-06 06:40:13][353494117124063][7984 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9ccf3d8-09ec-43b1-8f1b-1db21b11d68e","id":"QR_f9ccf3d8-09ec-43b1-8f1b-1db21b11d68e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:40:13][353494117124063][8140 ms][DEBUG] proc_open done in 6013 ms; code=255; res.len=3343 [2025-09-06 06:40:13][353494117124063][8140 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-09-06 06:40:13][353494117124063][8140 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:40:16][353494117124063][0 ms][INFO] === Request start === [2025-09-06 06:40:16][353494117124063][1 ms][DEBUG] START check_scloud [2025-09-06 06:40:16][353494117124063][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:40:17][353494117124063][334 ms][DEBUG] SU: done in 333 ms; outu0_a118 23240 18684 24290656 81668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:40:17][353494117124063][334 ms][DEBUG] targetPkg: running [2025-09-06 06:40:17][353494117124063][334 ms][DEBUG] END check_scloud in 333 ms [2025-09-06 06:40:17][353494117124063][334 ms][DEBUG] START check_boot_completed [2025-09-06 06:40:17][353494117124063][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:40:17][353494117124063][380 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:40:17][353494117124063][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:40:17][353494117124063][428 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:40:17][353494117124063][428 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 06:40:17][353494117124063][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:40:17][353494117124063][552 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 288\nsuccessfulTxPacketsPerSecond: 4.932599993638082\nretriedTxPackets: 44\nretriedTxPacketsPerSecond: 1.2039008086640999\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 257\nsuccessfulRxPacketsPerSecond: 4.333826299779285\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:40:17][353494117124063][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:40:17][353494117124063][927 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.846/269.846/269.846/0.000 ms\n [2025-09-06 06:40:17][353494117124063][927 ms][DEBUG] check_internet: online [2025-09-06 06:40:17][353494117124063][927 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:40:17][353494117124063][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494117124063\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4294\"}'\'' -e'"" [2025-09-06 06:40:17][353494117124063][928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:40:17][353494117124063][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494117124063\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4294\"}'\'' -e'"" [2025-09-06 06:40:22][353494117124063][5364 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b9b7981-eeb6-4932-b817-02b2ee103dfa","id":"QR_8b9b7981-eeb6-4932-b817-02b2ee103dfa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:40:22][353494117124063][5520 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-06 06:40:22][353494117124063][5520 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-06 06:40:22][353494117124063][5520 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:48:03][355808983607976][1 ms][INFO] === Request start === [2025-09-06 06:48:03][355808983607976][1 ms][DEBUG] START check_scloud [2025-09-06 06:48:03][355808983607976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:48:03][355808983607976][339 ms][DEBUG] SU: done in 338 ms; outu0_a118 23240 18684 24405140 97172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:48:03][355808983607976][339 ms][DEBUG] targetPkg: running [2025-09-06 06:48:03][355808983607976][339 ms][DEBUG] END check_scloud in 338 ms [2025-09-06 06:48:03][355808983607976][339 ms][DEBUG] START check_boot_completed [2025-09-06 06:48:03][355808983607976][339 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:48:03][355808983607976][370 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 06:48:03][355808983607976][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:48:03][355808983607976][417 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:48:03][355808983607976][417 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 06:48:03][355808983607976][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:48:03][355808983607976][527 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1088\nsuccessfulTxPacketsPerSecond: 0.2125349105194818\nretriedTxPackets: 206\nretriedTxPacketsPerSecond: 0.102946597282874\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1092\nsuccessfulRxPacketsPerSecond: 0.15275946693587755\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:48:03][355808983607976][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:48:05][355808983607976][1917 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.612/293.612/293.612/0.000 ms\n [2025-09-06 06:48:05][355808983607976][1917 ms][DEBUG] check_internet: online [2025-09-06 06:48:05][355808983607976][1917 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:48:05][355808983607976][1917 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355808983607976\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6289\"}'\'' -e'"" [2025-09-06 06:48:05][355808983607976][1917 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:48:05][355808983607976][1917 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355808983607976\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6289\"}'\'' -e'"" [2025-09-06 06:48:09][355808983607976][6197 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e91f4642-e2d4-46b5-81f6-321a5f243d40","id":"QR_e91f4642-e2d4-46b5-81f6-321a5f243d40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:48:09][355808983607976][6353 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-09-06 06:48:09][355808983607976][6353 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-09-06 06:48:09][355808983607976][6353 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:48:11][355808983607976][0 ms][INFO] === Request start === [2025-09-06 06:48:11][355808983607976][1 ms][DEBUG] START check_scloud [2025-09-06 06:48:11][355808983607976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:48:12][355808983607976][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 23240 18684 24597992 108148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:48:12][355808983607976][323 ms][DEBUG] targetPkg: running [2025-09-06 06:48:12][355808983607976][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 06:48:12][355808983607976][323 ms][DEBUG] START check_boot_completed [2025-09-06 06:48:12][355808983607976][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:48:12][355808983607976][370 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:48:12][355808983607976][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:48:12][355808983607976][432 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 06:48:12][355808983607976][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 06:48:12][355808983607976][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:48:12][355808983607976][573 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1088\nsuccessfulTxPacketsPerSecond: 0.2125349105194818\nretriedTxPackets: 206\nretriedTxPacketsPerSecond: 0.102946597282874\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1092\nsuccessfulRxPacketsPerSecond: 0.15275946693587755\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:48:12][355808983607976][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:48:12][355808983607976][979 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.826/290.826/290.826/0.000 ms\n [2025-09-06 06:48:12][355808983607976][979 ms][DEBUG] check_internet: online [2025-09-06 06:48:12][355808983607976][979 ms][DEBUG] rawBody.length=1160 [2025-09-06 06:48:12][355808983607976][979 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355808983607976\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9384\"}'\'' -e'"" [2025-09-06 06:48:12][355808983607976][979 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:48:12][355808983607976][979 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355808983607976\",\"model\":\"SM-A326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9384\"}'\'' -e'"" [2025-09-06 06:48:17][355808983607976][6024 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71cf9d50-fb3c-4922-9d8f-1f5faaf34608","id":"QR_71cf9d50-fb3c-4922-9d8f-1f5faaf34608","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:48:18][355808983607976][6181 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-06 06:48:18][355808983607976][6181 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-06 06:48:18][355808983607976][6181 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:51:03][352923545883941][1 ms][INFO] === Request start === [2025-09-06 06:51:03][352923545883941][1 ms][DEBUG] START check_scloud [2025-09-06 06:51:03][352923545883941][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:51:03][352923545883941][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 23240 18684 24703656 120156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:51:03][352923545883941][267 ms][DEBUG] targetPkg: running [2025-09-06 06:51:03][352923545883941][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-06 06:51:03][352923545883941][267 ms][DEBUG] START check_boot_completed [2025-09-06 06:51:03][352923545883941][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:51:03][352923545883941][298 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 06:51:03][352923545883941][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:51:03][352923545883941][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:51:03][352923545883941][345 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 06:51:03][352923545883941][345 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:51:03][352923545883941][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545883941\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8591\"}'\'' -e'"" [2025-09-06 06:51:03][352923545883941][345 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:51:03][352923545883941][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545883941\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8591\"}'\'' -e'"" [2025-09-06 06:51:08][352923545883941][5219 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ff1a9d0-c09b-4f18-a2c9-e3ec6a25900b","id":"QR_1ff1a9d0-c09b-4f18-a2c9-e3ec6a25900b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:51:08][352923545883941][5375 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-06 06:51:08][352923545883941][5375 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-06 06:51:08][352923545883941][5375 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:51:10][352923545883941][0 ms][INFO] === Request start === [2025-09-06 06:51:10][352923545883941][1 ms][DEBUG] START check_scloud [2025-09-06 06:51:10][352923545883941][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:51:11][352923545883941][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 23240 18684 24825648 131048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:51:11][352923545883941][316 ms][DEBUG] targetPkg: running [2025-09-06 06:51:11][352923545883941][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 06:51:11][352923545883941][316 ms][DEBUG] START check_boot_completed [2025-09-06 06:51:11][352923545883941][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:51:11][352923545883941][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 06:51:11][352923545883941][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:51:11][352923545883941][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:51:11][352923545883941][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 06:51:11][352923545883941][410 ms][DEBUG] rawBody.length=1160 [2025-09-06 06:51:11][352923545883941][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545883941\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8191\"}'\'' -e'"" [2025-09-06 06:51:11][352923545883941][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:51:11][352923545883941][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545883941\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8191\"}'\'' -e'"" [2025-09-06 06:51:16][352923545883941][5471 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd810851-dcaf-48d4-a748-372aa45f8eef","id":"QR_cd810851-dcaf-48d4-a748-372aa45f8eef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:51:16][352923545883941][5627 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 06:51:16][352923545883941][5627 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 06:51:16][352923545883941][5627 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:53:03][355347587818580][0 ms][INFO] === Request start === [2025-09-06 06:53:03][355347587818580][1 ms][DEBUG] START check_scloud [2025-09-06 06:53:03][355347587818580][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:53:03][355347587818580][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 23240 18684 24945584 143612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:53:03][355347587818580][330 ms][DEBUG] targetPkg: running [2025-09-06 06:53:03][355347587818580][330 ms][DEBUG] END check_scloud in 329 ms [2025-09-06 06:53:03][355347587818580][330 ms][DEBUG] START check_boot_completed [2025-09-06 06:53:03][355347587818580][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:53:03][355347587818580][377 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:53:03][355347587818580][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:53:03][355347587818580][424 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:53:03][355347587818580][424 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 06:53:03][355347587818580][424 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:53:03][355347587818580][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355347587818580\",\"model\":\"SM-N981N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6051\"}'\'' -e'"" [2025-09-06 06:53:03][355347587818580][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:53:03][355347587818580][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355347587818580\",\"model\":\"SM-N981N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6051\"}'\'' -e'"" [2025-09-06 06:53:08][355347587818580][5157 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4aa47e6d-54bf-47f2-a81b-ed8bad952f56","id":"QR_4aa47e6d-54bf-47f2-a81b-ed8bad952f56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:53:08][355347587818580][5313 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 06:53:08][355347587818580][5313 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 06:53:08][355347587818580][5313 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:53:10][355347587818580][1 ms][INFO] === Request start === [2025-09-06 06:53:10][355347587818580][1 ms][DEBUG] START check_scloud [2025-09-06 06:53:10][355347587818580][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:53:11][355347587818580][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 23240 18684 25100344 153180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:53:11][355347587818580][314 ms][DEBUG] targetPkg: running [2025-09-06 06:53:11][355347587818580][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 06:53:11][355347587818580][314 ms][DEBUG] START check_boot_completed [2025-09-06 06:53:11][355347587818580][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:53:11][355347587818580][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:53:11][355347587818580][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:53:11][355347587818580][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:53:11][355347587818580][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 06:53:11][355347587818580][407 ms][DEBUG] rawBody.length=1160 [2025-09-06 06:53:11][355347587818580][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355347587818580\",\"model\":\"SM-N981N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6169\"}'\'' -e'"" [2025-09-06 06:53:11][355347587818580][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:53:11][355347587818580][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355347587818580\",\"model\":\"SM-N981N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6169\"}'\'' -e'"" [2025-09-06 06:53:15][355347587818580][4797 ms][DEBUG] proc_open done in 4390 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 06:53:15][355347587818580][4797 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-09-06 06:53:15][355347587818580][4797 ms][WARN] Detected error: Process with pid 23240 either refused to load frida-agent, or terminated during injectionProcess with pid 23240 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 06:53:15][355347587818580][4797 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 06:53:15][355347587818580][5078 ms][DEBUG] SU: done in 281 ms; outsystem 18946 18684 12974160 273432 ep_poll 0 S system_server\n [2025-09-06 06:53:15][355347587818580][5079 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 06:53:16][355347587818580][5219 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 06:53:16][355347587818580][5219 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 06:53:16][355347587818580][5219 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 06:53:16][355347587818580][5359 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 06:53:16][355347587818580][5359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 06:53:16][355347587818580][5531 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 06:53:18][355347587818580][7546 ms][DEBUG] START check_boot_completed [2025-09-06 06:53:18][355347587818580][7546 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:53:18][355347587818580][7593 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 06:53:18][355347587818580][7593 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:53:18][355347587818580][7656 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 06:53:18][355347587818580][7656 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 06:53:21][355347587818580][10670 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 06:53:21][355347587818580][10670 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355347587818580\",\"model\":\"SM-N981N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6169\"}'\'' -e'"" [2025-09-06 06:53:26][355347587818580][15794 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b833f95-2a4d-4bbc-bf3b-6931d8ced919","id":"QR_6b833f95-2a4d-4bbc-bf3b-6931d8ced919","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:53:26][355347587818580][15950 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-06 06:53:26][355347587818580][15951 ms][DEBUG] END runCmdUntilRes#2 in 5280 ms [2025-09-06 06:53:26][355347587818580][15951 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:56:03][355116323850987][1 ms][INFO] === Request start === [2025-09-06 06:56:03][355116323850987][1 ms][DEBUG] START check_scloud [2025-09-06 06:56:03][355116323850987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:56:03][355116323850987][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 31900 18684 23791364 127648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:56:03][355116323850987][323 ms][DEBUG] targetPkg: running [2025-09-06 06:56:03][355116323850987][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 06:56:03][355116323850987][323 ms][DEBUG] START check_boot_completed [2025-09-06 06:56:03][355116323850987][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:56:03][355116323850987][354 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 06:56:03][355116323850987][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:56:03][355116323850987][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:56:03][355116323850987][401 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 06:56:03][355116323850987][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:56:03][355116323850987][526 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1265\nsuccessfulTxPacketsPerSecond: 0.46860356138706655\nretriedTxPackets: 264\nretriedTxPacketsPerSecond: 0.17668658871971363\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1245\nsuccessfulRxPacketsPerSecond: 0.3687372286324458\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:56:03][355116323850987][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:56:05][355116323850987][2010 ms][DEBUG] SU: done in 1484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.742/302.742/302.742/0.000 ms\n [2025-09-06 06:56:05][355116323850987][2010 ms][DEBUG] check_internet: online [2025-09-06 06:56:05][355116323850987][2010 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:56:05][355116323850987][2010 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355116323850987\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5871\"}'\'' -e'"" [2025-09-06 06:56:05][355116323850987][2010 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:56:05][355116323850987][2010 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355116323850987\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5871\"}'\'' -e'"" [2025-09-06 06:56:09][355116323850987][5759 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 06:56:09][355116323850987][5916 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=115 [2025-09-06 06:56:09][355116323850987][5916 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-06 06:56:09][355116323850987][5916 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 06:56:09][][0 ms][INFO] === Request start === [2025-09-06 06:56:09][][1 ms][DEBUG] START check_scloud [2025-09-06 06:56:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:56:09][][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 31900 18684 23948300 138708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:56:09][][298 ms][DEBUG] targetPkg: running [2025-09-06 06:56:09][][298 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 06:56:09][][298 ms][DEBUG] START check_boot_completed [2025-09-06 06:56:09][][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:56:09][][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:56:09][][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:56:09][][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:56:09][][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 06:56:09][][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:56:10][][501 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1265\nsuccessfulTxPacketsPerSecond: 0.46860356138706655\nretriedTxPackets: 264\nretriedTxPacketsPerSecond: 0.17668658871971363\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1245\nsuccessfulRxPacketsPerSecond: 0.3687372286324458\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:56:10][][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:56:10][][829 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.280/228.280/228.280/0.000 ms\n [2025-09-06 06:56:10][][829 ms][DEBUG] check_internet: online [2025-09-06 06:56:10][][829 ms][DEBUG] rawBody.length=1131 [2025-09-06 06:56:10][][830 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX601GPKJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8009\"}'\'' -e'"" [2025-09-06 06:56:10][][830 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:56:10][][830 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX601GPKJ\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8009\"}'\'' -e'"" [2025-09-06 06:56:13][][4063 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 06:56:13][][4219 ms][DEBUG] proc_open done in 3389 ms; code=255; res.len=115 [2025-09-06 06:56:13][][4219 ms][DEBUG] END runCmdUntilRes#1 in 3389 ms [2025-09-06 06:56:13][][4219 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 06:56:15][355116323850987][0 ms][INFO] === Request start === [2025-09-06 06:56:15][355116323850987][1 ms][DEBUG] START check_scloud [2025-09-06 06:56:15][355116323850987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:56:15][355116323850987][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 31900 18684 24121172 148396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:56:15][355116323850987][263 ms][DEBUG] targetPkg: running [2025-09-06 06:56:15][355116323850987][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-06 06:56:15][355116323850987][263 ms][DEBUG] START check_boot_completed [2025-09-06 06:56:15][355116323850987][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:56:15][355116323850987][294 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 06:56:15][355116323850987][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:56:15][355116323850987][341 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:56:15][355116323850987][341 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 06:56:15][355116323850987][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:56:15][355116323850987][482 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1265\nsuccessfulTxPacketsPerSecond: 0.46860356138706655\nretriedTxPackets: 264\nretriedTxPacketsPerSecond: 0.17668658871971363\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1245\nsuccessfulRxPacketsPerSecond: 0.3687372286324458\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:56:15][355116323850987][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:56:16][355116323850987][810 ms][DEBUG] SU: done in 329 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.361/228.361/228.361/0.000 ms\n [2025-09-06 06:56:16][355116323850987][811 ms][DEBUG] check_internet: online [2025-09-06 06:56:16][355116323850987][811 ms][DEBUG] rawBody.length=1160 [2025-09-06 06:56:16][355116323850987][811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355116323850987\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2141\"}'\'' -e'"" [2025-09-06 06:56:16][355116323850987][811 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:56:16][355116323850987][811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355116323850987\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2141\"}'\'' -e'"" [2025-09-06 06:56:21][355116323850987][5996 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c94a3e61-b38f-4d4f-adaf-6f1c784ac8ae","id":"QR_c94a3e61-b38f-4d4f-adaf-6f1c784ac8ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:56:21][355116323850987][6152 ms][DEBUG] proc_open done in 5341 ms; code=255; res.len=3343 [2025-09-06 06:56:21][355116323850987][6152 ms][DEBUG] END runCmdUntilRes#1 in 5341 ms [2025-09-06 06:56:21][355116323850987][6152 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:56:26][351642482160805][0 ms][INFO] === Request start === [2025-09-06 06:56:26][351642482160805][1 ms][DEBUG] START check_scloud [2025-09-06 06:56:26][351642482160805][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:56:26][351642482160805][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 31900 18684 24278136 158256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:56:26][351642482160805][320 ms][DEBUG] targetPkg: running [2025-09-06 06:56:26][351642482160805][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 06:56:26][351642482160805][321 ms][DEBUG] START check_boot_completed [2025-09-06 06:56:26][351642482160805][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:56:26][351642482160805][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:56:26][351642482160805][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:56:26][351642482160805][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 06:56:26][351642482160805][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 06:56:26][351642482160805][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 06:56:26][351642482160805][540 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1265\nsuccessfulTxPacketsPerSecond: 0.46860356138706655\nretriedTxPackets: 264\nretriedTxPacketsPerSecond: 0.17668658871971363\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1245\nsuccessfulRxPacketsPerSecond: 0.3687372286324458\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 06:56:26][351642482160805][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 06:56:27][351642482160805][898 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.972/227.972/227.972/0.000 ms\n [2025-09-06 06:56:27][351642482160805][898 ms][DEBUG] check_internet: online [2025-09-06 06:56:27][351642482160805][898 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:56:27][351642482160805][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642482160805\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4817\"}'\'' -e'"" [2025-09-06 06:56:27][351642482160805][898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:56:27][351642482160805][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642482160805\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4817\"}'\'' -e'"" [2025-09-06 06:56:30][351642482160805][4679 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d985ecdd-4531-4aa1-bd58-24f60d89832c","id":"QR_d985ecdd-4531-4aa1-bd58-24f60d89832c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:56:31][351642482160805][4835 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-06 06:56:31][351642482160805][4835 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-09-06 06:56:31][351642482160805][4835 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 06:57:03][353325471588263][0 ms][INFO] === Request start === [2025-09-06 06:57:03][353325471588263][1 ms][DEBUG] START check_scloud [2025-09-06 06:57:03][353325471588263][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:57:03][353325471588263][330 ms][DEBUG] SU: done in 330 ms; outu0_a118 31900 18684 24357012 163448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:57:03][353325471588263][330 ms][DEBUG] targetPkg: running [2025-09-06 06:57:03][353325471588263][330 ms][DEBUG] END check_scloud in 330 ms [2025-09-06 06:57:03][353325471588263][330 ms][DEBUG] START check_boot_completed [2025-09-06 06:57:03][353325471588263][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:57:03][353325471588263][377 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 06:57:03][353325471588263][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:57:03][353325471588263][440 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 06:57:03][353325471588263][440 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 06:57:03][353325471588263][440 ms][DEBUG] rawBody.length=1150 [2025-09-06 06:57:03][353325471588263][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325471588263\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8470\"}'\'' -e'"" [2025-09-06 06:57:03][353325471588263][440 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:57:03][353325471588263][440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325471588263\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8470\"}'\'' -e'"" [2025-09-06 06:57:07][353325471588263][4017 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 06:57:07][353325471588263][4173 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=115 [2025-09-06 06:57:07][353325471588263][4173 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-06 06:57:07][353325471588263][4173 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 06:57:07][][0 ms][INFO] === Request start === [2025-09-06 06:57:07][][1 ms][DEBUG] START check_scloud [2025-09-06 06:57:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:57:08][][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 31900 18684 24519964 174364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:57:08][][314 ms][DEBUG] targetPkg: running [2025-09-06 06:57:08][][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 06:57:08][][314 ms][DEBUG] START check_boot_completed [2025-09-06 06:57:08][][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:57:08][][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:57:08][][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:57:08][][409 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 06:57:08][][409 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 06:57:08][][409 ms][DEBUG] rawBody.length=1131 [2025-09-06 06:57:08][][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT40P86DK\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5558\"}'\'' -e'"" [2025-09-06 06:57:08][][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:57:08][][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT40P86DK\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5558\"}'\'' -e'"" [2025-09-06 06:57:12][][4859 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 06:57:12][][5016 ms][DEBUG] proc_open done in 4607 ms; code=255; res.len=115 [2025-09-06 06:57:12][][5016 ms][DEBUG] END runCmdUntilRes#1 in 4607 ms [2025-09-06 06:57:12][][5016 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 06:57:14][353325471588263][0 ms][INFO] === Request start === [2025-09-06 06:57:14][353325471588263][1 ms][DEBUG] START check_scloud [2025-09-06 06:57:14][353325471588263][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 06:57:14][353325471588263][325 ms][DEBUG] SU: done in 325 ms; outu0_a118 31900 18684 24689188 185340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 06:57:14][353325471588263][326 ms][DEBUG] targetPkg: running [2025-09-06 06:57:14][353325471588263][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-06 06:57:14][353325471588263][326 ms][DEBUG] START check_boot_completed [2025-09-06 06:57:14][353325471588263][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 06:57:15][353325471588263][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 06:57:15][353325471588263][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 06:57:15][353325471588263][435 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 06:57:15][353325471588263][435 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 06:57:15][353325471588263][435 ms][DEBUG] rawBody.length=1160 [2025-09-06 06:57:15][353325471588263][435 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325471588263\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2480\"}'\'' -e'"" [2025-09-06 06:57:15][353325471588263][435 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 06:57:15][353325471588263][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325471588263\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2480\"}'\'' -e'"" [2025-09-06 06:57:19][353325471588263][5293 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c3afc21-68d8-466c-80fe-3979c26289f6","id":"QR_5c3afc21-68d8-466c-80fe-3979c26289f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 06:57:20][353325471588263][5449 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 06:57:20][353325471588263][5449 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 06:57:20][353325471588263][5449 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:03:04][355819214273561][1 ms][INFO] === Request start === [2025-09-06 07:03:04][355819214273561][1 ms][DEBUG] START check_scloud [2025-09-06 07:03:04][355819214273561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:03:05][355819214273561][250 ms][DEBUG] SU: done in 248 ms; outu0_a118 31900 18684 24817344 186828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:03:05][355819214273561][250 ms][DEBUG] targetPkg: running [2025-09-06 07:03:05][355819214273561][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-06 07:03:05][355819214273561][250 ms][DEBUG] START check_boot_completed [2025-09-06 07:03:05][355819214273561][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:03:05][355819214273561][280 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 07:03:05][355819214273561][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:03:05][355819214273561][327 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:03:05][355819214273561][327 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 07:03:05][355819214273561][328 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:03:05][355819214273561][328 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819214273561\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W307NG7W\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1514\"}'\'' -e'"" [2025-09-06 07:03:05][355819214273561][328 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:03:05][355819214273561][328 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819214273561\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W307NG7W\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1514\"}'\'' -e'"" [2025-09-06 07:03:10][355819214273561][5201 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3bc25e2-a013-45af-aead-ff278adaa045","id":"QR_f3bc25e2-a013-45af-aead-ff278adaa045","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:03:10][355819214273561][5357 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-06 07:03:10][355819214273561][5358 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-06 07:03:10][355819214273561][5358 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:10:04][350121675765580][1 ms][INFO] === Request start === [2025-09-06 07:10:04][350121675765580][1 ms][DEBUG] START check_scloud [2025-09-06 07:10:04][350121675765580][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:10:04][350121675765580][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 31900 18684 24948568 196960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:10:04][350121675765580][287 ms][DEBUG] targetPkg: running [2025-09-06 07:10:04][350121675765580][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-06 07:10:04][350121675765580][287 ms][DEBUG] START check_boot_completed [2025-09-06 07:10:04][350121675765580][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:10:04][350121675765580][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 07:10:04][350121675765580][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:10:04][350121675765580][381 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 07:10:04][350121675765580][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 07:10:04][350121675765580][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:10:04][350121675765580][506 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1556\nsuccessfulTxPacketsPerSecond: 0.06742280089297754\nretriedTxPackets: 351\nretriedTxPacketsPerSecond: 0.022474266964325848\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1479\nsuccessfulRxPacketsPerSecond: 0.05993137857153559\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:10:04][350121675765580][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:10:06][350121675765580][1880 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=289 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 289.208/289.208/289.208/0.000 ms\n [2025-09-06 07:10:06][350121675765580][1880 ms][DEBUG] check_internet: online [2025-09-06 07:10:06][350121675765580][1880 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:10:06][350121675765580][1880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121675765580\",\"model\":\"SM-G998U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4986\"}'\'' -e'"" [2025-09-06 07:10:06][350121675765580][1880 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:10:06][350121675765580][1880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121675765580\",\"model\":\"SM-G998U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4986\"}'\'' -e'"" [2025-09-06 07:10:11][350121675765580][7035 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8327f32e-8065-4cff-b59f-0ad317fc3090","id":"QR_8327f32e-8065-4cff-b59f-0ad317fc3090","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:10:11][350121675765580][7191 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 07:10:11][350121675765580][7192 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 07:10:11][350121675765580][7192 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:10:15][350121675765580][0 ms][INFO] === Request start === [2025-09-06 07:10:15][350121675765580][1 ms][DEBUG] START check_scloud [2025-09-06 07:10:15][350121675765580][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:10:15][350121675765580][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 31900 18684 25098412 205452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:10:15][350121675765580][315 ms][DEBUG] targetPkg: running [2025-09-06 07:10:15][350121675765580][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 07:10:15][350121675765580][315 ms][DEBUG] START check_boot_completed [2025-09-06 07:10:15][350121675765580][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:10:15][350121675765580][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:10:15][350121675765580][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:10:15][350121675765580][410 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 07:10:15][350121675765580][411 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 07:10:15][350121675765580][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:10:15][350121675765580][534 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1556\nsuccessfulTxPacketsPerSecond: 0.06742280089297754\nretriedTxPackets: 351\nretriedTxPacketsPerSecond: 0.022474266964325848\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1479\nsuccessfulRxPacketsPerSecond: 0.05993137857153559\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:10:15][350121675765580][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:10:16][350121675765580][940 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.833/267.833/267.833/0.000 ms\n [2025-09-06 07:10:16][350121675765580][940 ms][DEBUG] check_internet: online [2025-09-06 07:10:16][350121675765580][940 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:10:16][350121675765580][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121675765580\",\"model\":\"SM-G998U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4112\"}'\'' -e'"" [2025-09-06 07:10:16][350121675765580][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:10:16][350121675765580][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121675765580\",\"model\":\"SM-G998U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4112\"}'\'' -e'"" [2025-09-06 07:10:20][350121675765580][4845 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_720dfd82-41c4-4ee3-890e-e18ebcdaff98","id":"QR_720dfd82-41c4-4ee3-890e-e18ebcdaff98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:10:20][350121675765580][5001 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-06 07:10:20][350121675765580][5001 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-06 07:10:20][350121675765580][5001 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:11:03][351263051392628][0 ms][INFO] === Request start === [2025-09-06 07:11:03][351263051392628][1 ms][DEBUG] START check_scloud [2025-09-06 07:11:03][351263051392628][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:11:03][351263051392628][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 31900 18684 25205936 215452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:11:03][351263051392628][319 ms][DEBUG] targetPkg: running [2025-09-06 07:11:03][351263051392628][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 07:11:03][351263051392628][320 ms][DEBUG] START check_boot_completed [2025-09-06 07:11:03][351263051392628][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:11:03][351263051392628][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:11:03][351263051392628][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:11:03][351263051392628][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 07:11:03][351263051392628][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 07:11:03][351263051392628][429 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:11:03][351263051392628][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263051392628\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3685\"}'\'' -e'"" [2025-09-06 07:11:03][351263051392628][429 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:11:03][351263051392628][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263051392628\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3685\"}'\'' -e'"" [2025-09-06 07:11:07][351263051392628][4428 ms][DEBUG] proc_open done in 3998 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 07:11:07][351263051392628][4428 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-06 07:11:07][351263051392628][4428 ms][WARN] Detected error: Process with pid 31900 either refused to load frida-agent, or terminated during injectionProcess with pid 31900 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 07:11:07][351263051392628][4428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 07:11:07][351263051392628][4725 ms][DEBUG] SU: done in 297 ms; outsystem 18946 18684 12971876 224336 ep_poll 0 S system_server\n [2025-09-06 07:11:07][351263051392628][4725 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 07:11:08][351263051392628][4865 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 07:11:08][351263051392628][4865 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 07:11:08][351263051392628][4865 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 07:11:08][351263051392628][4990 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 07:11:08][351263051392628][4990 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 07:11:08][351263051392628][5179 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 07:11:10][351263051392628][7192 ms][DEBUG] START check_boot_completed [2025-09-06 07:11:10][351263051392628][7193 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:11:10][351263051392628][7239 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:11:10][351263051392628][7240 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:11:10][351263051392628][7286 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:11:10][351263051392628][7286 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 07:11:13][351263051392628][10301 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 07:11:13][351263051392628][10301 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263051392628\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3685\"}'\'' -e'"" [2025-09-06 07:11:17][351263051392628][14207 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ace6e31d-0b48-4764-bca6-688dd341c004","id":"QR_ace6e31d-0b48-4764-bca6-688dd341c004","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:11:17][351263051392628][14363 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-06 07:11:17][351263051392628][14363 ms][DEBUG] END runCmdUntilRes#2 in 4062 ms [2025-09-06 07:11:17][351263051392628][14363 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:11:20][351263051392628][0 ms][INFO] === Request start === [2025-09-06 07:11:20][351263051392628][1 ms][DEBUG] START check_scloud [2025-09-06 07:11:20][351263051392628][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:11:20][351263051392628][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 1615 18684 23902432 123692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:11:20][351263051392628][255 ms][DEBUG] targetPkg: running [2025-09-06 07:11:20][351263051392628][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-06 07:11:20][351263051392628][255 ms][DEBUG] START check_boot_completed [2025-09-06 07:11:20][351263051392628][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:11:20][351263051392628][301 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:11:20][351263051392628][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:11:20][351263051392628][350 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 07:11:20][351263051392628][350 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 07:11:20][351263051392628][350 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:11:20][351263051392628][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263051392628\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3643\"}'\'' -e'"" [2025-09-06 07:11:20][351263051392628][350 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:11:20][351263051392628][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263051392628\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3643\"}'\'' -e'"" [2025-09-06 07:11:26][351263051392628][6534 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8bbec00c-f488-4f41-8389-826d85f190b1","id":"QR_8bbec00c-f488-4f41-8389-826d85f190b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:11:26][351263051392628][6690 ms][DEBUG] proc_open done in 6341 ms; code=255; res.len=3343 [2025-09-06 07:11:26][351263051392628][6691 ms][DEBUG] END runCmdUntilRes#1 in 6341 ms [2025-09-06 07:11:26][351263051392628][6691 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:20:03][354949615663465][1 ms][INFO] === Request start === [2025-09-06 07:20:03][354949615663465][1 ms][DEBUG] START check_scloud [2025-09-06 07:20:03][354949615663465][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:20:03][354949615663465][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 1615 18684 23954296 136440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:20:03][354949615663465][300 ms][DEBUG] targetPkg: running [2025-09-06 07:20:03][354949615663465][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 07:20:03][354949615663465][300 ms][DEBUG] START check_boot_completed [2025-09-06 07:20:03][354949615663465][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:20:04][354949615663465][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 07:20:04][354949615663465][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:20:04][354949615663465][394 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 07:20:04][354949615663465][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 07:20:04][354949615663465][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:20:04][354949615663465][519 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1691\nsuccessfulTxPacketsPerSecond: 0.048999271544163045\nretriedTxPackets: 404\nretriedTxPacketsPerSecond: 0.029399562926497827\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1593\nsuccessfulRxPacketsPerSecond: 0.03266618102944203\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:20:04][354949615663465][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:20:05][354949615663465][1941 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.021/299.021/299.021/0.000 ms\n [2025-09-06 07:20:05][354949615663465][1941 ms][DEBUG] check_internet: online [2025-09-06 07:20:05][354949615663465][1941 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:20:05][354949615663465][1941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354949615663465\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3183\"}'\'' -e'"" [2025-09-06 07:20:05][354949615663465][1941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:20:05][354949615663465][1941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354949615663465\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3183\"}'\'' -e'"" [2025-09-06 07:20:09][354949615663465][5971 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ed5cf39-0011-4c2a-9374-f34be710a3db","id":"QR_8ed5cf39-0011-4c2a-9374-f34be710a3db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:20:09][354949615663465][6127 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-06 07:20:09][354949615663465][6127 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-06 07:20:09][354949615663465][6127 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:20:12][354949615663465][0 ms][INFO] === Request start === [2025-09-06 07:20:12][354949615663465][1 ms][DEBUG] START check_scloud [2025-09-06 07:20:12][354949615663465][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:20:12][354949615663465][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 1615 18684 24109260 147672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:20:12][354949615663465][317 ms][DEBUG] targetPkg: running [2025-09-06 07:20:12][354949615663465][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 07:20:12][354949615663465][318 ms][DEBUG] START check_boot_completed [2025-09-06 07:20:12][354949615663465][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:20:12][354949615663465][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:20:12][354949615663465][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:20:12][354949615663465][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:20:12][354949615663465][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 07:20:12][354949615663465][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:20:12][354949615663465][522 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1691\nsuccessfulTxPacketsPerSecond: 0.048999271544163045\nretriedTxPackets: 404\nretriedTxPacketsPerSecond: 0.029399562926497827\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1593\nsuccessfulRxPacketsPerSecond: 0.03266618102944203\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:20:12][354949615663465][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:20:13][354949615663465][926 ms][DEBUG] SU: done in 404 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=308 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 308.182/308.182/308.182/0.000 ms\n [2025-09-06 07:20:13][354949615663465][926 ms][DEBUG] check_internet: online [2025-09-06 07:20:13][354949615663465][926 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:20:13][354949615663465][927 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354949615663465\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5855\"}'\'' -e'"" [2025-09-06 07:20:13][354949615663465][927 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:20:13][354949615663465][927 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354949615663465\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5855\"}'\'' -e'"" [2025-09-06 07:20:18][354949615663465][5988 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f83d228-ae2f-44a7-94a6-6683e141cc89","id":"QR_9f83d228-ae2f-44a7-94a6-6683e141cc89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:20:18][354949615663465][6144 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 07:20:18][354949615663465][6144 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 07:20:18][354949615663465][6144 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:26:03][352689824645059][1 ms][INFO] === Request start === [2025-09-06 07:26:03][352689824645059][1 ms][DEBUG] START check_scloud [2025-09-06 07:26:03][352689824645059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:26:03][352689824645059][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 1615 18684 24198540 130900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:26:03][352689824645059][311 ms][DEBUG] targetPkg: running [2025-09-06 07:26:03][352689824645059][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 07:26:03][352689824645059][311 ms][DEBUG] START check_boot_completed [2025-09-06 07:26:03][352689824645059][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:26:03][352689824645059][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 07:26:03][352689824645059][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:26:04][352689824645059][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:26:04][352689824645059][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 07:26:04][352689824645059][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:26:04][352689824645059][499 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1751\nsuccessfulTxPacketsPerSecond: 0.19936932835796098\nretriedTxPackets: 425\nretriedTxPacketsPerSecond: 0.06977926492528634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1648\nsuccessfulRxPacketsPerSecond: 0.18275521766146424\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:26:04][352689824645059][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:26:05][352689824645059][1842 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.795/302.795/302.795/0.000 ms\n [2025-09-06 07:26:05][352689824645059][1842 ms][DEBUG] check_internet: online [2025-09-06 07:26:05][352689824645059][1842 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:26:05][352689824645059][1842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352689824645059\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4872\"}'\'' -e'"" [2025-09-06 07:26:05][352689824645059][1842 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:26:05][352689824645059][1842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352689824645059\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4872\"}'\'' -e'"" [2025-09-06 07:26:09][352689824645059][5669 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ab104eb-965d-4718-aced-f97e150f8bb5","id":"QR_3ab104eb-965d-4718-aced-f97e150f8bb5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:26:09][352689824645059][5825 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-06 07:26:09][352689824645059][5825 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-06 07:26:09][352689824645059][5825 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:26:11][352689824645059][0 ms][INFO] === Request start === [2025-09-06 07:26:11][352689824645059][1 ms][DEBUG] START check_scloud [2025-09-06 07:26:11][352689824645059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:26:12][352689824645059][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 1615 18684 24351188 142016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:26:12][352689824645059][325 ms][DEBUG] targetPkg: running [2025-09-06 07:26:12][352689824645059][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-06 07:26:12][352689824645059][325 ms][DEBUG] START check_boot_completed [2025-09-06 07:26:12][352689824645059][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:26:12][352689824645059][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:26:12][352689824645059][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:26:12][352689824645059][434 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 07:26:12][352689824645059][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 07:26:12][352689824645059][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:26:12][352689824645059][559 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1751\nsuccessfulTxPacketsPerSecond: 0.19936932835796098\nretriedTxPackets: 425\nretriedTxPacketsPerSecond: 0.06977926492528634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1648\nsuccessfulRxPacketsPerSecond: 0.18275521766146424\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:26:12][352689824645059][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:26:12][352689824645059][903 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.071/259.071/259.071/0.000 ms\n [2025-09-06 07:26:12][352689824645059][903 ms][DEBUG] check_internet: online [2025-09-06 07:26:12][352689824645059][903 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:26:12][352689824645059][903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352689824645059\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7781\"}'\'' -e'"" [2025-09-06 07:26:12][352689824645059][903 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:26:12][352689824645059][903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352689824645059\",\"model\":\"SM-A346E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7781\"}'\'' -e'"" [2025-09-06 07:26:18][352689824645059][6511 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_919059be-1184-4591-b3f5-986b61f5639e","id":"QR_919059be-1184-4591-b3f5-986b61f5639e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:26:18][352689824645059][6667 ms][DEBUG] proc_open done in 5764 ms; code=255; res.len=3343 [2025-09-06 07:26:18][352689824645059][6667 ms][DEBUG] END runCmdUntilRes#1 in 5764 ms [2025-09-06 07:26:18][352689824645059][6667 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:28:03][352677531652633][1 ms][INFO] === Request start === [2025-09-06 07:28:03][352677531652633][1 ms][DEBUG] START check_scloud [2025-09-06 07:28:03][352677531652633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:28:03][352677531652633][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 1615 18684 24469012 153988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:28:03][352677531652633][308 ms][DEBUG] targetPkg: running [2025-09-06 07:28:03][352677531652633][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 07:28:03][352677531652633][308 ms][DEBUG] START check_boot_completed [2025-09-06 07:28:03][352677531652633][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:28:03][352677531652633][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:28:03][352677531652633][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:28:03][352677531652633][403 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 07:28:03][352677531652633][403 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 07:28:03][352677531652633][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:28:04][352677531652633][542 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1751\nsuccessfulTxPacketsPerSecond: 0.19936932835796098\nretriedTxPackets: 425\nretriedTxPacketsPerSecond: 0.06977926492528634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1648\nsuccessfulRxPacketsPerSecond: 0.18275521766146424\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:28:04][352677531652633][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:28:04][352677531652633][1058 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=400 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 400.003/400.003/400.003/0.000 ms\n [2025-09-06 07:28:04][352677531652633][1058 ms][DEBUG] check_internet: online [2025-09-06 07:28:04][352677531652633][1058 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:28:04][352677531652633][1058 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531652633\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5654\"}'\'' -e'"" [2025-09-06 07:28:04][352677531652633][1058 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:28:04][352677531652633][1058 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531652633\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5654\"}'\'' -e'"" [2025-09-06 07:28:09][352677531652633][5650 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60c4359e-027a-44ce-823d-de16c5df0429","id":"QR_60c4359e-027a-44ce-823d-de16c5df0429","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:28:09][352677531652633][5806 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-06 07:28:09][352677531652633][5806 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-09-06 07:28:09][352677531652633][5807 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:28:11][352677531652633][0 ms][INFO] === Request start === [2025-09-06 07:28:11][352677531652633][1 ms][DEBUG] START check_scloud [2025-09-06 07:28:11][352677531652633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:28:12][352677531652633][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 1615 18684 24619612 164840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:28:12][352677531652633][322 ms][DEBUG] targetPkg: running [2025-09-06 07:28:12][352677531652633][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-06 07:28:12][352677531652633][322 ms][DEBUG] START check_boot_completed [2025-09-06 07:28:12][352677531652633][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:28:12][352677531652633][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:28:12][352677531652633][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:28:12][352677531652633][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:28:12][352677531652633][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 07:28:12][352677531652633][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:28:12][352677531652633][525 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=26100861 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1751\nsuccessfulTxPacketsPerSecond: 0.19936932835796098\nretriedTxPackets: 425\nretriedTxPacketsPerSecond: 0.06977926492528634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1648\nsuccessfulRxPacketsPerSecond: 0.18275521766146424\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:28:12][352677531652633][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:28:12][352677531652633][917 ms][DEBUG] SU: done in 392 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.077/273.077/273.077/0.000 ms\n [2025-09-06 07:28:12][352677531652633][918 ms][DEBUG] check_internet: online [2025-09-06 07:28:12][352677531652633][918 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:28:12][352677531652633][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531652633\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4291\"}'\'' -e'"" [2025-09-06 07:28:12][352677531652633][918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:28:12][352677531652633][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531652633\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4291\"}'\'' -e'"" [2025-09-06 07:28:18][352677531652633][6383 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af546979-8f1e-4fa4-97cd-1e23225afb9b","id":"QR_af546979-8f1e-4fa4-97cd-1e23225afb9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:28:18][352677531652633][6539 ms][DEBUG] proc_open done in 5621 ms; code=255; res.len=3343 [2025-09-06 07:28:18][352677531652633][6539 ms][DEBUG] END runCmdUntilRes#1 in 5621 ms [2025-09-06 07:28:18][352677531652633][6539 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:29:03][355001768645730][0 ms][INFO] === Request start === [2025-09-06 07:29:03][355001768645730][1 ms][DEBUG] START check_scloud [2025-09-06 07:29:03][355001768645730][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:29:04][355001768645730][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 1615 18684 24759964 176792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:29:04][355001768645730][305 ms][DEBUG] targetPkg: running [2025-09-06 07:29:04][355001768645730][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 07:29:04][355001768645730][305 ms][DEBUG] START check_boot_completed [2025-09-06 07:29:04][355001768645730][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:29:04][355001768645730][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:29:04][355001768645730][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:29:04][355001768645730][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:29:04][355001768645730][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 07:29:04][355001768645730][398 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:29:04][355001768645730][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001768645730\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4443\"}'\'' -e'"" [2025-09-06 07:29:04][355001768645730][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:29:04][355001768645730][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001768645730\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4443\"}'\'' -e'"" [2025-09-06 07:29:07][355001768645730][3944 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_608192a3-e998-4643-9ec9-6d17fcd69a3e","id":"QR_608192a3-e998-4643-9ec9-6d17fcd69a3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:29:07][355001768645730][4100 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-06 07:29:07][355001768645730][4100 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-06 07:29:07][355001768645730][4101 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:29:10][355001768645730][0 ms][INFO] === Request start === [2025-09-06 07:29:10][355001768645730][1 ms][DEBUG] START check_scloud [2025-09-06 07:29:10][355001768645730][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:29:10][355001768645730][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 1615 18684 24888228 187548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:29:10][355001768645730][265 ms][DEBUG] targetPkg: running [2025-09-06 07:29:10][355001768645730][265 ms][DEBUG] END check_scloud in 265 ms [2025-09-06 07:29:10][355001768645730][265 ms][DEBUG] START check_boot_completed [2025-09-06 07:29:10][355001768645730][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:29:10][355001768645730][312 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:29:10][355001768645730][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:29:10][355001768645730][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:29:10][355001768645730][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 07:29:10][355001768645730][358 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:29:10][355001768645730][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001768645730\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6594\"}'\'' -e'"" [2025-09-06 07:29:10][355001768645730][359 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:29:10][355001768645730][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001768645730\",\"model\":\"SM-F711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6594\"}'\'' -e'"" [2025-09-06 07:29:16][355001768645730][5763 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ce8ed8f-1689-4a38-b237-84edca6366dd","id":"QR_7ce8ed8f-1689-4a38-b237-84edca6366dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:29:16][355001768645730][5920 ms][DEBUG] proc_open done in 5561 ms; code=255; res.len=3343 [2025-09-06 07:29:16][355001768645730][5920 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-09-06 07:29:16][355001768645730][5920 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:29:20][355255460989065][0 ms][INFO] === Request start === [2025-09-06 07:29:20][355255460989065][1 ms][DEBUG] START check_scloud [2025-09-06 07:29:20][355255460989065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:29:20][355255460989065][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 1615 18684 25034864 199272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:29:20][355255460989065][309 ms][DEBUG] targetPkg: running [2025-09-06 07:29:20][355255460989065][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 07:29:20][355255460989065][309 ms][DEBUG] START check_boot_completed [2025-09-06 07:29:20][355255460989065][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:29:20][355255460989065][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:29:20][355255460989065][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:29:20][355255460989065][418 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 07:29:20][355255460989065][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 07:29:20][355255460989065][418 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:29:20][355255460989065][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255460989065\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6699\"}'\'' -e'"" [2025-09-06 07:29:20][355255460989065][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:29:20][355255460989065][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255460989065\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6699\"}'\'' -e'"" [2025-09-06 07:29:25][355255460989065][5245 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6088782e-42a8-434b-8739-c14dcf84354c","id":"QR_6088782e-42a8-434b-8739-c14dcf84354c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:29:25][355255460989065][5401 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-06 07:29:25][355255460989065][5401 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-06 07:29:25][355255460989065][5401 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:29:28][355255460989065][1 ms][INFO] === Request start === [2025-09-06 07:29:28][355255460989065][1 ms][DEBUG] START check_scloud [2025-09-06 07:29:28][355255460989065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:29:28][355255460989065][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 1615 18684 25141972 210080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:29:28][355255460989065][308 ms][DEBUG] targetPkg: running [2025-09-06 07:29:28][355255460989065][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 07:29:28][355255460989065][308 ms][DEBUG] START check_boot_completed [2025-09-06 07:29:28][355255460989065][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:29:28][355255460989065][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:29:28][355255460989065][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:29:28][355255460989065][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:29:28][355255460989065][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 07:29:28][355255460989065][402 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:29:28][355255460989065][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255460989065\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6763\"}'\'' -e'"" [2025-09-06 07:29:28][355255460989065][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:29:28][355255460989065][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255460989065\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6763\"}'\'' -e'"" [2025-09-06 07:29:32][355255460989065][4432 ms][DEBUG] proc_open done in 4030 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 07:29:32][355255460989065][4432 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-06 07:29:32][355255460989065][4432 ms][WARN] Detected error: Process with pid 1615 either refused to load frida-agent, or terminated during injectionProcess with pid 1615 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 07:29:32][355255460989065][4432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 07:29:32][355255460989065][4714 ms][DEBUG] SU: done in 282 ms; outsystem 3923 1 12695804 123644 ptrace_stop 0 t system_server\nsystem 18946 18684 13028012 205488 ep_poll 0 S system_server\n [2025-09-06 07:29:32][355255460989065][4714 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 07:29:32][355255460989065][4838 ms][DEBUG] SU: done in 124 ms; out [2025-09-06 07:29:32][355255460989065][4838 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 07:29:32][355255460989065][4838 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 07:29:33][355255460989065][4949 ms][DEBUG] SU: done in 111 ms; out [2025-09-06 07:29:33][355255460989065][4949 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 07:29:33][355255460989065][5151 ms][DEBUG] SU: done in 201 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 07:29:35][355255460989065][7166 ms][DEBUG] START check_boot_completed [2025-09-06 07:29:35][355255460989065][7166 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:29:35][355255460989065][7212 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:29:35][355255460989065][7212 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:29:35][355255460989065][7259 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:29:35][355255460989065][7259 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 07:29:38][355255460989065][10274 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 07:29:38][355255460989065][10274 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255460989065\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6763\"}'\'' -e'"" [2025-09-06 07:29:38][355255460989065][10790 ms][DEBUG] proc_open done in 516 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-06 07:29:38][355255460989065][10790 ms][DEBUG] END runCmdUntilRes#2 in 516 ms [2025-09-06 07:29:38][355255460989065][10790 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-06 07:29:38][355255460989065][10790 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 07:29:39][355255460989065][11087 ms][DEBUG] SU: done in 296 ms; out [2025-09-06 07:31:03][350234450223905][1 ms][INFO] === Request start === [2025-09-06 07:31:03][350234450223905][1 ms][DEBUG] START check_scloud [2025-09-06 07:31:03][350234450223905][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:31:03][350234450223905][350 ms][DEBUG] SU: done in 349 ms; out [2025-09-06 07:31:03][350234450223905][350 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 07:31:03][350234450223905][381 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 07:31:03][350234450223905][382 ms][DEBUG] check_devices: device found [2025-09-06 07:31:03][350234450223905][382 ms][WARN] targetPkg: not running, restarting [2025-09-06 07:31:03][350234450223905][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 07:31:03][350234450223905][538 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 07:31:03][350234450223905][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 07:31:03][350234450223905][866 ms][DEBUG] SU: done in 328 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 07:31:05][350234450223905][2881 ms][DEBUG] END check_scloud in 2880 ms [2025-09-06 07:31:05][350234450223905][2881 ms][DEBUG] START check_boot_completed [2025-09-06 07:31:05][350234450223905][2881 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:31:06][350234450223905][2928 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:31:06][350234450223905][2928 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:31:06][350234450223905][3006 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 07:31:06][350234450223905][3006 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 07:31:06][350234450223905][3006 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:31:06][350234450223905][3006 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350234450223905\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7909\"}'\'' -e'"" [2025-09-06 07:31:06][350234450223905][3006 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:31:06][350234450223905][3006 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350234450223905\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7909\"}'\'' -e'"" [2025-09-06 07:31:11][350234450223905][8302 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_debf6879-c9a6-40a7-950a-4ff3345d5064","id":"QR_debf6879-c9a6-40a7-950a-4ff3345d5064","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:31:11][350234450223905][8458 ms][DEBUG] proc_open done in 5452 ms; code=255; res.len=3343 [2025-09-06 07:31:11][350234450223905][8458 ms][DEBUG] END runCmdUntilRes#1 in 5452 ms [2025-09-06 07:31:11][350234450223905][8458 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:39:03][352600227506038][1 ms][INFO] === Request start === [2025-09-06 07:39:03][352600227506038][1 ms][DEBUG] START check_scloud [2025-09-06 07:39:03][352600227506038][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:39:03][352600227506038][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 12845 4061 23490592 103372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:39:03][352600227506038][281 ms][DEBUG] targetPkg: running [2025-09-06 07:39:03][352600227506038][281 ms][DEBUG] END check_scloud in 280 ms [2025-09-06 07:39:03][352600227506038][281 ms][DEBUG] START check_boot_completed [2025-09-06 07:39:03][352600227506038][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:39:04][352600227506038][312 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 07:39:04][352600227506038][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:39:04][352600227506038][359 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:39:04][352600227506038][359 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 07:39:04][352600227506038][359 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:39:04][352600227506038][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227506038\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7509\"}'\'' -e'"" [2025-09-06 07:39:04][352600227506038][359 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:39:04][352600227506038][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227506038\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7509\"}'\'' -e'"" [2025-09-06 07:39:09][352600227506038][5451 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce1a08c7-8369-4ac6-b0eb-54f8539a341f","id":"QR_ce1a08c7-8369-4ac6-b0eb-54f8539a341f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:39:09][352600227506038][5608 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-06 07:39:09][352600227506038][5608 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-06 07:39:09][352600227506038][5608 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:39:11][352600227506038][0 ms][INFO] === Request start === [2025-09-06 07:39:11][352600227506038][1 ms][DEBUG] START check_scloud [2025-09-06 07:39:11][352600227506038][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:39:11][352600227506038][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 12845 4061 23660916 115108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:39:11][352600227506038][281 ms][DEBUG] targetPkg: running [2025-09-06 07:39:11][352600227506038][281 ms][DEBUG] END check_scloud in 281 ms [2025-09-06 07:39:11][352600227506038][282 ms][DEBUG] START check_boot_completed [2025-09-06 07:39:11][352600227506038][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:39:11][352600227506038][326 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 07:39:11][352600227506038][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:39:12][352600227506038][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:39:12][352600227506038][373 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 07:39:12][352600227506038][373 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:39:12][352600227506038][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227506038\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1719\"}'\'' -e'"" [2025-09-06 07:39:12][352600227506038][373 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:39:12][352600227506038][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227506038\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1719\"}'\'' -e'"" [2025-09-06 07:39:17][352600227506038][5825 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_990944b7-4dfc-40d5-ae48-7c5e21cc4cd3","id":"QR_990944b7-4dfc-40d5-ae48-7c5e21cc4cd3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:39:17][352600227506038][5981 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-09-06 07:39:17][352600227506038][5981 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-09-06 07:39:17][352600227506038][5981 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:39:21][354529382691004][0 ms][INFO] === Request start === [2025-09-06 07:39:21][354529382691004][1 ms][DEBUG] START check_scloud [2025-09-06 07:39:21][354529382691004][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:39:22][354529382691004][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 12845 4061 23823868 124092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:39:22][354529382691004][316 ms][DEBUG] targetPkg: running [2025-09-06 07:39:22][354529382691004][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 07:39:22][354529382691004][316 ms][DEBUG] START check_boot_completed [2025-09-06 07:39:22][354529382691004][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:39:22][354529382691004][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:39:22][354529382691004][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:39:22][354529382691004][457 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 07:39:22][354529382691004][457 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 07:39:22][354529382691004][457 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:39:22][354529382691004][457 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529382691004\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7025\"}'\'' -e'"" [2025-09-06 07:39:22][354529382691004][457 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:39:22][354529382691004][457 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529382691004\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7025\"}'\'' -e'"" [2025-09-06 07:39:25][354529382691004][4002 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33ae1ca5-7099-4bed-8b1d-160e60fd9fad","id":"QR_33ae1ca5-7099-4bed-8b1d-160e60fd9fad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:39:25][354529382691004][4159 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-06 07:39:25][354529382691004][4159 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-06 07:39:25][354529382691004][4159 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:39:28][354529382691004][0 ms][INFO] === Request start === [2025-09-06 07:39:28][354529382691004][1 ms][DEBUG] START check_scloud [2025-09-06 07:39:28][354529382691004][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:39:28][354529382691004][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 12845 4061 23984544 135256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:39:28][354529382691004][298 ms][DEBUG] targetPkg: running [2025-09-06 07:39:28][354529382691004][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 07:39:28][354529382691004][298 ms][DEBUG] START check_boot_completed [2025-09-06 07:39:28][354529382691004][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:39:28][354529382691004][345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:39:28][354529382691004][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:39:28][354529382691004][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 07:39:28][354529382691004][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 07:39:28][354529382691004][407 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:39:28][354529382691004][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529382691004\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7867\"}'\'' -e'"" [2025-09-06 07:39:28][354529382691004][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:39:28][354529382691004][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529382691004\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7867\"}'\'' -e'"" [2025-09-06 07:39:33][354529382691004][5343 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69424e17-c790-4b27-8998-28794520cc73","id":"QR_69424e17-c790-4b27-8998-28794520cc73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:39:33][354529382691004][5499 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-06 07:39:33][354529382691004][5499 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-06 07:39:33][354529382691004][5500 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:41:03][350142321042182][0 ms][INFO] === Request start === [2025-09-06 07:41:03][350142321042182][1 ms][DEBUG] START check_scloud [2025-09-06 07:41:03][350142321042182][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:41:04][350142321042182][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 12845 4061 24093364 146716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:41:04][350142321042182][289 ms][DEBUG] targetPkg: running [2025-09-06 07:41:04][350142321042182][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-06 07:41:04][350142321042182][289 ms][DEBUG] START check_boot_completed [2025-09-06 07:41:04][350142321042182][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:41:04][350142321042182][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:41:04][350142321042182][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:41:04][350142321042182][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:41:04][350142321042182][382 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 07:41:04][350142321042182][382 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:41:04][350142321042182][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142321042182\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3907\"}'\'' -e'"" [2025-09-06 07:41:04][350142321042182][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:41:04][350142321042182][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142321042182\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3907\"}'\'' -e'"" [2025-09-06 07:41:09][350142321042182][5194 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f1ae1c2-84d2-47e6-930e-0624ff7cee0d","id":"QR_5f1ae1c2-84d2-47e6-930e-0624ff7cee0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:41:09][350142321042182][5350 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-06 07:41:09][350142321042182][5350 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-09-06 07:41:09][350142321042182][5350 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:41:11][350142321042182][1 ms][INFO] === Request start === [2025-09-06 07:41:11][350142321042182][1 ms][DEBUG] START check_scloud [2025-09-06 07:41:11][350142321042182][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:41:11][350142321042182][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 12845 4061 24225660 158608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:41:11][350142321042182][315 ms][DEBUG] targetPkg: running [2025-09-06 07:41:11][350142321042182][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 07:41:11][350142321042182][315 ms][DEBUG] START check_boot_completed [2025-09-06 07:41:11][350142321042182][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:41:11][350142321042182][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:41:11][350142321042182][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:41:12][350142321042182][424 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 07:41:12][350142321042182][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 07:41:12][350142321042182][425 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:41:12][350142321042182][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142321042182\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8676\"}'\'' -e'"" [2025-09-06 07:41:12][350142321042182][425 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:41:12][350142321042182][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142321042182\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8676\"}'\'' -e'"" [2025-09-06 07:41:17][350142321042182][5673 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04b80c8e-6846-473e-b780-9d3f49911df9","id":"QR_04b80c8e-6846-473e-b780-9d3f49911df9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:41:17][350142321042182][5829 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-06 07:41:17][350142321042182][5829 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-06 07:41:17][350142321042182][5829 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:45:03][350178739522878][1 ms][INFO] === Request start === [2025-09-06 07:45:03][350178739522878][1 ms][DEBUG] START check_scloud [2025-09-06 07:45:03][350178739522878][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:45:04][350178739522878][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 12845 4061 24329148 164548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:45:04][350178739522878][323 ms][DEBUG] targetPkg: running [2025-09-06 07:45:04][350178739522878][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 07:45:04][350178739522878][323 ms][DEBUG] START check_boot_completed [2025-09-06 07:45:04][350178739522878][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:45:04][350178739522878][354 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 07:45:04][350178739522878][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:45:04][350178739522878][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:45:04][350178739522878][401 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 07:45:04][350178739522878][401 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:45:04][350178739522878][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739522878\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6194\"}'\'' -e'"" [2025-09-06 07:45:04][350178739522878][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:45:04][350178739522878][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739522878\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6194\"}'\'' -e'"" [2025-09-06 07:45:08][350178739522878][4963 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 07:45:08][350178739522878][5119 ms][DEBUG] proc_open done in 4718 ms; code=255; res.len=101 [2025-09-06 07:45:08][350178739522878][5119 ms][DEBUG] END runCmdUntilRes#1 in 4718 ms [2025-09-06 07:45:08][350178739522878][5119 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 07:45:09][][0 ms][INFO] === Request start === [2025-09-06 07:45:09][][1 ms][DEBUG] START check_scloud [2025-09-06 07:45:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:45:09][][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 12845 4061 24490180 175328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:45:09][][315 ms][DEBUG] targetPkg: running [2025-09-06 07:45:09][][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 07:45:09][][315 ms][DEBUG] START check_boot_completed [2025-09-06 07:45:09][][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:45:09][][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 07:45:09][][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:45:09][][395 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 07:45:09][][395 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-06 07:45:09][][395 ms][DEBUG] rawBody.length=1131 [2025-09-06 07:45:09][][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T40KTXLY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1657\"}'\'' -e'"" [2025-09-06 07:45:09][][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:45:09][][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T40KTXLY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1657\"}'\'' -e'"" [2025-09-06 07:45:12][][3783 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 07:45:13][][3939 ms][DEBUG] proc_open done in 3544 ms; code=255; res.len=101 [2025-09-06 07:45:13][][3939 ms][DEBUG] END runCmdUntilRes#1 in 3544 ms [2025-09-06 07:45:13][][3939 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 07:45:14][350178739522878][0 ms][INFO] === Request start === [2025-09-06 07:45:14][350178739522878][1 ms][DEBUG] START check_scloud [2025-09-06 07:45:14][350178739522878][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:45:15][350178739522878][328 ms][DEBUG] SU: done in 328 ms; outu0_a118 12845 4061 24661324 185248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:45:15][350178739522878][329 ms][DEBUG] targetPkg: running [2025-09-06 07:45:15][350178739522878][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-06 07:45:15][350178739522878][329 ms][DEBUG] START check_boot_completed [2025-09-06 07:45:15][350178739522878][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:45:15][350178739522878][375 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:45:15][350178739522878][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:45:15][350178739522878][439 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 07:45:15][350178739522878][439 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 07:45:15][350178739522878][439 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:45:15][350178739522878][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739522878\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6729\"}'\'' -e'"" [2025-09-06 07:45:15][350178739522878][439 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:45:15][350178739522878][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739522878\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6729\"}'\'' -e'"" [2025-09-06 07:45:19][350178739522878][5218 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff1b1789-4c6e-4db7-a4b9-e9eb278571ec","id":"QR_ff1b1789-4c6e-4db7-a4b9-e9eb278571ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:45:20][350178739522878][5374 ms][DEBUG] proc_open done in 4935 ms; code=255; res.len=3343 [2025-09-06 07:45:20][350178739522878][5374 ms][DEBUG] END runCmdUntilRes#1 in 4935 ms [2025-09-06 07:45:20][350178739522878][5374 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:46:03][350290811868275][0 ms][INFO] === Request start === [2025-09-06 07:46:03][350290811868275][1 ms][DEBUG] START check_scloud [2025-09-06 07:46:03][350290811868275][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:46:04][350290811868275][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 12845 4061 24787432 193952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:46:04][350290811868275][314 ms][DEBUG] targetPkg: running [2025-09-06 07:46:04][350290811868275][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 07:46:04][350290811868275][314 ms][DEBUG] START check_boot_completed [2025-09-06 07:46:04][350290811868275][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:46:04][350290811868275][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 07:46:04][350290811868275][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:46:04][350290811868275][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:46:04][350290811868275][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 07:46:04][350290811868275][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:46:04][350290811868275][518 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1200\nsuccessfulTxPacketsPerSecond: 0.4282968063666818\nretriedTxPackets: 193\nretriedTxPacketsPerSecond: 0.11288442958501692\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1192\nsuccessfulRxPacketsPerSecond: 0.3452935493188753\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:46:04][350290811868275][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:46:05][350290811868275][2157 ms][DEBUG] SU: done in 1639 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.818/300.818/300.818/0.000 ms\n [2025-09-06 07:46:05][350290811868275][2157 ms][DEBUG] check_internet: online [2025-09-06 07:46:05][350290811868275][2157 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:46:05][350290811868275][2157 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290811868275\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3797\"}'\'' -e'"" [2025-09-06 07:46:05][350290811868275][2157 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:46:05][350290811868275][2157 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290811868275\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3797\"}'\'' -e'"" [2025-09-06 07:46:10][350290811868275][6890 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d86519df-124b-4abf-b19b-ba0f401c9c1b","id":"QR_d86519df-124b-4abf-b19b-ba0f401c9c1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:46:10][350290811868275][7046 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 07:46:10][350290811868275][7046 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 07:46:10][350290811868275][7047 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:46:13][350290811868275][0 ms][INFO] === Request start === [2025-09-06 07:46:13][350290811868275][1 ms][DEBUG] START check_scloud [2025-09-06 07:46:13][350290811868275][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:46:13][350290811868275][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 12845 4061 24968820 204180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:46:13][350290811868275][298 ms][DEBUG] targetPkg: running [2025-09-06 07:46:13][350290811868275][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 07:46:13][350290811868275][298 ms][DEBUG] START check_boot_completed [2025-09-06 07:46:13][350290811868275][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:46:13][350290811868275][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:46:13][350290811868275][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:46:13][350290811868275][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 07:46:13][350290811868275][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 07:46:13][350290811868275][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:46:13][350290811868275][564 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1200\nsuccessfulTxPacketsPerSecond: 0.4282968063666818\nretriedTxPackets: 193\nretriedTxPacketsPerSecond: 0.11288442958501692\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1192\nsuccessfulRxPacketsPerSecond: 0.3452935493188753\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:46:13][350290811868275][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:46:14][350290811868275][1032 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=347 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 347.572/347.572/347.572/0.000 ms\n [2025-09-06 07:46:14][350290811868275][1032 ms][DEBUG] check_internet: online [2025-09-06 07:46:14][350290811868275][1032 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:46:14][350290811868275][1032 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290811868275\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6039\"}'\'' -e'"" [2025-09-06 07:46:14][350290811868275][1032 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:46:14][350290811868275][1032 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290811868275\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6039\"}'\'' -e'"" [2025-09-06 07:46:18][350290811868275][5422 ms][DEBUG] proc_open done in 4390 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 07:46:18][350290811868275][5422 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-09-06 07:46:18][350290811868275][5422 ms][WARN] Detected error: Process with pid 12845 either refused to load frida-agent, or terminated during injectionProcess with pid 12845 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 07:46:18][350290811868275][5422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 07:46:18][350290811868275][5734 ms][DEBUG] SU: done in 312 ms; outsystem 4402 4061 12705632 254860 ep_poll 0 S system_server\n [2025-09-06 07:46:18][350290811868275][5734 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 07:46:19][350290811868275][5874 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 07:46:19][350290811868275][5875 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 07:46:19][350290811868275][5875 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 07:46:19][350290811868275][5999 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 07:46:19][350290811868275][6000 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 07:46:19][350290811868275][6202 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 07:46:21][350290811868275][8217 ms][DEBUG] START check_boot_completed [2025-09-06 07:46:21][350290811868275][8218 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:46:21][350290811868275][8264 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:46:21][350290811868275][8264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:46:21][350290811868275][8312 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:46:21][350290811868275][8312 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 07:46:24][350290811868275][11326 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 07:46:24][350290811868275][11326 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290811868275\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6039\"}'\'' -e'"" [2025-09-06 07:46:29][350290811868275][16403 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a0933aa-d203-4aad-af2b-f07e546b3fce","id":"QR_0a0933aa-d203-4aad-af2b-f07e546b3fce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:46:29][350290811868275][16559 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-06 07:46:29][350290811868275][16560 ms][DEBUG] END runCmdUntilRes#2 in 5233 ms [2025-09-06 07:46:29][350290811868275][16560 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:47:04][353494114777046][1 ms][INFO] === Request start === [2025-09-06 07:47:04][353494114777046][1 ms][DEBUG] START check_scloud [2025-09-06 07:47:04][353494114777046][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:47:04][353494114777046][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 16968 4061 23451828 127076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:47:04][353494114777046][315 ms][DEBUG] targetPkg: running [2025-09-06 07:47:04][353494114777046][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 07:47:04][353494114777046][315 ms][DEBUG] START check_boot_completed [2025-09-06 07:47:04][353494114777046][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:47:04][353494114777046][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:47:04][353494114777046][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:47:04][353494114777046][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 07:47:04][353494114777046][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 07:47:04][353494114777046][424 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:47:04][353494114777046][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494114777046\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5199\"}'\'' -e'"" [2025-09-06 07:47:04][353494114777046][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:47:04][353494114777046][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494114777046\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5199\"}'\'' -e'"" [2025-09-06 07:47:09][353494114777046][5345 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf26a837-e582-44a7-8a46-3df32cb681a1","id":"QR_bf26a837-e582-44a7-8a46-3df32cb681a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:47:09][353494114777046][5501 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-06 07:47:09][353494114777046][5501 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-06 07:47:09][353494114777046][5501 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:47:13][353494114777046][0 ms][INFO] === Request start === [2025-09-06 07:47:13][353494114777046][1 ms][DEBUG] START check_scloud [2025-09-06 07:47:13][353494114777046][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:47:13][353494114777046][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 16968 4061 23620732 137480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:47:13][353494114777046][307 ms][DEBUG] targetPkg: running [2025-09-06 07:47:13][353494114777046][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 07:47:13][353494114777046][307 ms][DEBUG] START check_boot_completed [2025-09-06 07:47:13][353494114777046][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:47:13][353494114777046][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:47:13][353494114777046][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:47:13][353494114777046][402 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 07:47:13][353494114777046][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 07:47:13][353494114777046][402 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:47:13][353494114777046][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494114777046\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5650\"}'\'' -e'"" [2025-09-06 07:47:13][353494114777046][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:47:13][353494114777046][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353494114777046\",\"model\":\"SM-T307U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5650\"}'\'' -e'"" [2025-09-06 07:47:18][353494114777046][4853 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41efac51-e5ba-44f5-96a0-0a454f3bb61d","id":"QR_41efac51-e5ba-44f5-96a0-0a454f3bb61d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:47:18][353494114777046][5009 ms][DEBUG] proc_open done in 4606 ms; code=255; res.len=3343 [2025-09-06 07:47:18][353494114777046][5009 ms][DEBUG] END runCmdUntilRes#1 in 4607 ms [2025-09-06 07:47:18][353494114777046][5009 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:48:03][350020270351004][0 ms][INFO] === Request start === [2025-09-06 07:48:03][350020270351004][1 ms][DEBUG] START check_scloud [2025-09-06 07:48:03][350020270351004][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:48:03][350020270351004][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 16968 4061 23781592 148328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:48:03][350020270351004][316 ms][DEBUG] targetPkg: running [2025-09-06 07:48:03][350020270351004][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 07:48:03][350020270351004][317 ms][DEBUG] START check_boot_completed [2025-09-06 07:48:03][350020270351004][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:48:03][350020270351004][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:48:03][350020270351004][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:48:04][350020270351004][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:48:04][350020270351004][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 07:48:04][350020270351004][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:48:04][350020270351004][519 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1337\nsuccessfulTxPacketsPerSecond: 1.0587898881701483\nretriedTxPackets: 239\nretriedTxPacketsPerSecond: 0.35550609383815196\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1309\nsuccessfulRxPacketsPerSecond: 0.9042220212839953\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:48:04][350020270351004][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:48:04][350020270351004][894 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.827/248.827/248.827/0.000 ms\n [2025-09-06 07:48:04][350020270351004][894 ms][DEBUG] check_internet: online [2025-09-06 07:48:04][350020270351004][895 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:48:04][350020270351004][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350020270351004\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3286\"}'\'' -e'"" [2025-09-06 07:48:04][350020270351004][895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:48:04][350020270351004][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350020270351004\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3286\"}'\'' -e'"" [2025-09-06 07:48:08][350020270351004][4487 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93a7ab75-3cef-436b-b800-67f198026e00","id":"QR_93a7ab75-3cef-436b-b800-67f198026e00","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:48:08][350020270351004][4643 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-09-06 07:48:08][350020270351004][4643 ms][DEBUG] END runCmdUntilRes#1 in 3748 ms [2025-09-06 07:48:08][350020270351004][4643 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:51:03][356196386058560][1 ms][INFO] === Request start === [2025-09-06 07:51:03][356196386058560][1 ms][DEBUG] START check_scloud [2025-09-06 07:51:03][356196386058560][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:51:03][356196386058560][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 16968 4061 23896432 160092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:51:03][356196386058560][314 ms][DEBUG] targetPkg: running [2025-09-06 07:51:03][356196386058560][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 07:51:03][356196386058560][314 ms][DEBUG] START check_boot_completed [2025-09-06 07:51:03][356196386058560][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:51:03][356196386058560][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 07:51:03][356196386058560][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:51:03][356196386058560][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:51:03][356196386058560][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 07:51:03][356196386058560][392 ms][DEBUG] rawBody.length=1149 [2025-09-06 07:51:03][356196386058560][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356196386058560\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8232\"}'\'' -e'"" [2025-09-06 07:51:03][356196386058560][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:51:03][356196386058560][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356196386058560\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8232\"}'\'' -e'"" [2025-09-06 07:51:08][356196386058560][4985 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3cd1c022-6b50-488d-a868-87b1bd7f4bcf","id":"QR_3cd1c022-6b50-488d-a868-87b1bd7f4bcf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:51:08][356196386058560][5141 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-06 07:51:08][356196386058560][5141 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-09-06 07:51:08][356196386058560][5141 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:51:10][356196386058560][0 ms][INFO] === Request start === [2025-09-06 07:51:10][356196386058560][1 ms][DEBUG] START check_scloud [2025-09-06 07:51:10][356196386058560][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:51:11][356196386058560][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 16968 4061 24073788 171860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:51:11][356196386058560][323 ms][DEBUG] targetPkg: running [2025-09-06 07:51:11][356196386058560][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 07:51:11][356196386058560][323 ms][DEBUG] START check_boot_completed [2025-09-06 07:51:11][356196386058560][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:51:11][356196386058560][370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:51:11][356196386058560][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:51:11][356196386058560][432 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 07:51:11][356196386058560][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 07:51:11][356196386058560][432 ms][DEBUG] rawBody.length=1159 [2025-09-06 07:51:11][356196386058560][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356196386058560\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6501\"}'\'' -e'"" [2025-09-06 07:51:11][356196386058560][432 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:51:11][356196386058560][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356196386058560\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6501\"}'\'' -e'"" [2025-09-06 07:51:16][356196386058560][5759 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa6d50e4-0521-4a19-a097-029c1ba5bdf4","id":"QR_fa6d50e4-0521-4a19-a097-029c1ba5bdf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:51:16][356196386058560][5915 ms][DEBUG] proc_open done in 5482 ms; code=255; res.len=3343 [2025-09-06 07:51:16][356196386058560][5915 ms][DEBUG] END runCmdUntilRes#1 in 5483 ms [2025-09-06 07:51:16][356196386058560][5915 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:51:20][358243511167078][1 ms][INFO] === Request start === [2025-09-06 07:51:20][358243511167078][1 ms][DEBUG] START check_scloud [2025-09-06 07:51:20][358243511167078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:51:21][358243511167078][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 16968 4061 24200004 182836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:51:21][358243511167078][319 ms][DEBUG] targetPkg: running [2025-09-06 07:51:21][358243511167078][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 07:51:21][358243511167078][319 ms][DEBUG] START check_boot_completed [2025-09-06 07:51:21][358243511167078][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:51:21][358243511167078][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:51:21][358243511167078][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:51:21][358243511167078][413 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 07:51:21][358243511167078][413 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 07:51:21][358243511167078][413 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:51:21][358243511167078][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358243511167078\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9061\"}'\'' -e'"" [2025-09-06 07:51:21][358243511167078][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:51:21][358243511167078][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358243511167078\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9061\"}'\'' -e'"" [2025-09-06 07:51:24][358243511167078][4036 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35ae170b-a4f9-4f05-8d73-54f8ccb1fa5a","id":"QR_35ae170b-a4f9-4f05-8d73-54f8ccb1fa5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:51:25][358243511167078][4193 ms][DEBUG] proc_open done in 3779 ms; code=255; res.len=3343 [2025-09-06 07:51:25][358243511167078][4193 ms][DEBUG] END runCmdUntilRes#1 in 3779 ms [2025-09-06 07:51:25][358243511167078][4193 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:51:27][358243511167078][0 ms][INFO] === Request start === [2025-09-06 07:51:27][358243511167078][1 ms][DEBUG] START check_scloud [2025-09-06 07:51:27][358243511167078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:51:27][358243511167078][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 16968 4061 24334376 194748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:51:27][358243511167078][319 ms][DEBUG] targetPkg: running [2025-09-06 07:51:27][358243511167078][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 07:51:27][358243511167078][319 ms][DEBUG] START check_boot_completed [2025-09-06 07:51:27][358243511167078][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:51:27][358243511167078][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:51:27][358243511167078][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:51:27][358243511167078][413 ms][DEBUG] SU: done in 46 ms; out [2025-09-06 07:51:27][358243511167078][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 07:51:27][358243511167078][413 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:51:27][358243511167078][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358243511167078\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5505\"}'\'' -e'"" [2025-09-06 07:51:27][358243511167078][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:51:27][358243511167078][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358243511167078\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5505\"}'\'' -e'"" [2025-09-06 07:51:32][358243511167078][5271 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a6e7c58-d27a-40c0-9c39-d3a82d0019d4","id":"QR_4a6e7c58-d27a-40c0-9c39-d3a82d0019d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:51:32][358243511167078][5427 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 07:51:32][358243511167078][5427 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 07:51:32][358243511167078][5427 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:52:07][350178739522878][0 ms][INFO] === Request start === [2025-09-06 07:52:07][350178739522878][1 ms][DEBUG] START check_scloud [2025-09-06 07:52:07][350178739522878][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:52:08][350178739522878][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 16968 4061 24411204 205544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:52:08][350178739522878][319 ms][DEBUG] targetPkg: running [2025-09-06 07:52:08][350178739522878][319 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 07:52:08][350178739522878][319 ms][DEBUG] START check_boot_completed [2025-09-06 07:52:08][350178739522878][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:52:08][350178739522878][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:52:08][350178739522878][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:52:08][350178739522878][413 ms][DEBUG] SU: done in 46 ms; out [2025-09-06 07:52:08][350178739522878][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 07:52:08][350178739522878][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:52:08][350178739522878][522 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1337\nsuccessfulTxPacketsPerSecond: 1.0587898881701483\nretriedTxPackets: 239\nretriedTxPacketsPerSecond: 0.35550609383815196\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1309\nsuccessfulRxPacketsPerSecond: 0.9042220212839953\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:52:08][350178739522878][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:52:09][350178739522878][1929 ms][DEBUG] SU: done in 1407 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.323/302.323/302.323/0.000 ms\n [2025-09-06 07:52:09][350178739522878][1929 ms][DEBUG] check_internet: online [2025-09-06 07:52:09][350178739522878][1929 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:52:09][350178739522878][1929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739522878\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8546\"}'\'' -e'"" [2025-09-06 07:52:09][350178739522878][1930 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:52:09][350178739522878][1930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739522878\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8546\"}'\'' -e'"" [2025-09-06 07:52:13][350178739522878][5630 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 07:52:13][350178739522878][5786 ms][DEBUG] proc_open done in 3857 ms; code=255; res.len=101 [2025-09-06 07:52:13][350178739522878][5786 ms][DEBUG] END runCmdUntilRes#1 in 3857 ms [2025-09-06 07:52:13][350178739522878][5786 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 07:52:14][][0 ms][INFO] === Request start === [2025-09-06 07:52:14][][1 ms][DEBUG] START check_scloud [2025-09-06 07:52:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:52:14][][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 16968 4061 24553804 217444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:52:14][][322 ms][DEBUG] targetPkg: running [2025-09-06 07:52:14][][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-06 07:52:14][][322 ms][DEBUG] START check_boot_completed [2025-09-06 07:52:14][][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:52:14][][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:52:14][][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:52:14][][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:52:14][][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 07:52:14][][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:52:14][][525 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1337\nsuccessfulTxPacketsPerSecond: 1.0587898881701483\nretriedTxPackets: 239\nretriedTxPacketsPerSecond: 0.35550609383815196\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1309\nsuccessfulRxPacketsPerSecond: 0.9042220212839953\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:52:14][][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:52:15][][853 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.087/228.087/228.087/0.000 ms\n [2025-09-06 07:52:15][][853 ms][DEBUG] check_internet: online [2025-09-06 07:52:15][][853 ms][DEBUG] rawBody.length=1131 [2025-09-06 07:52:15][][853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T40KTXLY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4624\"}'\'' -e'"" [2025-09-06 07:52:15][][853 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:52:15][][853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T40KTXLY\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4624\"}'\'' -e'"" [2025-09-06 07:52:18][][4102 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 07:52:18][][4258 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=101 [2025-09-06 07:52:18][][4258 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-09-06 07:52:18][][4258 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 07:52:20][350178739522878][0 ms][INFO] === Request start === [2025-09-06 07:52:20][350178739522878][1 ms][DEBUG] START check_scloud [2025-09-06 07:52:20][350178739522878][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:52:20][350178739522878][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 16968 4061 24735188 227916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:52:20][350178739522878][314 ms][DEBUG] targetPkg: running [2025-09-06 07:52:20][350178739522878][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 07:52:20][350178739522878][314 ms][DEBUG] START check_boot_completed [2025-09-06 07:52:20][350178739522878][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:52:20][350178739522878][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:52:20][350178739522878][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:52:20][350178739522878][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 07:52:20][350178739522878][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 07:52:20][350178739522878][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 07:52:20][350178739522878][533 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1337\nsuccessfulTxPacketsPerSecond: 1.0587898881701483\nretriedTxPackets: 239\nretriedTxPacketsPerSecond: 0.35550609383815196\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1309\nsuccessfulRxPacketsPerSecond: 0.9042220212839953\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 07:52:20][350178739522878][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 07:52:21][350178739522878][892 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.662/228.662/228.662/0.000 ms\n [2025-09-06 07:52:21][350178739522878][892 ms][DEBUG] check_internet: online [2025-09-06 07:52:21][350178739522878][892 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:52:21][350178739522878][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739522878\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6387\"}'\'' -e'"" [2025-09-06 07:52:21][350178739522878][893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:52:21][350178739522878][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739522878\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6387\"}'\'' -e'"" [2025-09-06 07:52:26][350178739522878][5937 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c264ad77-4d28-44d4-8dd7-29e86cc05cd6","id":"QR_c264ad77-4d28-44d4-8dd7-29e86cc05cd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:52:26][350178739522878][6094 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-06 07:52:26][350178739522878][6094 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-06 07:52:26][350178739522878][6094 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:53:04][355622367573716][1 ms][INFO] === Request start === [2025-09-06 07:53:04][355622367573716][1 ms][DEBUG] START check_scloud [2025-09-06 07:53:04][355622367573716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:53:04][355622367573716][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 16968 4061 24811632 240028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:53:04][355622367573716][285 ms][DEBUG] targetPkg: running [2025-09-06 07:53:04][355622367573716][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-06 07:53:04][355622367573716][285 ms][DEBUG] START check_boot_completed [2025-09-06 07:53:04][355622367573716][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:53:04][355622367573716][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:53:04][355622367573716][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:53:04][355622367573716][410 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 07:53:04][355622367573716][410 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 07:53:04][355622367573716][410 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:53:04][355622367573716][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355622367573716\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9605\"}'\'' -e'"" [2025-09-06 07:53:04][355622367573716][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:53:04][355622367573716][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355622367573716\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9605\"}'\'' -e'"" [2025-09-06 07:53:08][355622367573716][4518 ms][DEBUG] proc_open done in 4108 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 07:53:08][355622367573716][4518 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-06 07:53:08][355622367573716][4518 ms][WARN] Detected error: Process with pid 16968 either refused to load frida-agent, or terminated during injectionProcess with pid 16968 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 07:53:08][355622367573716][4518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 07:53:08][355622367573716][4784 ms][DEBUG] SU: done in 266 ms; outsystem 4402 4061 12819000 244504 ep_poll 0 S system_server\n [2025-09-06 07:53:08][355622367573716][4784 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 07:53:08][355622367573716][4940 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 07:53:08][355622367573716][4940 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 07:53:08][355622367573716][4940 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 07:53:09][355622367573716][5065 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 07:53:09][355622367573716][5065 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 07:53:09][355622367573716][5221 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 07:53:11][355622367573716][7236 ms][DEBUG] START check_boot_completed [2025-09-06 07:53:11][355622367573716][7237 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:53:11][355622367573716][7283 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:53:11][355622367573716][7283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:53:11][355622367573716][7331 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 07:53:11][355622367573716][7331 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 07:53:14][355622367573716][10345 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 07:53:14][355622367573716][10345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355622367573716\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9605\"}'\'' -e'"" [2025-09-06 07:53:19][355622367573716][15297 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_890358a6-9565-46bb-9d7c-89fa1f586465","id":"QR_890358a6-9565-46bb-9d7c-89fa1f586465","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:53:19][355622367573716][15453 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 07:53:19][355622367573716][15454 ms][DEBUG] END runCmdUntilRes#2 in 5108 ms [2025-09-06 07:53:19][355622367573716][15454 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:53:21][355622367573716][0 ms][INFO] === Request start === [2025-09-06 07:53:21][355622367573716][1 ms][DEBUG] START check_scloud [2025-09-06 07:53:21][355622367573716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:53:22][355622367573716][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 18498 4061 23606680 124380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:53:22][355622367573716][241 ms][DEBUG] targetPkg: running [2025-09-06 07:53:22][355622367573716][241 ms][DEBUG] END check_scloud in 240 ms [2025-09-06 07:53:22][355622367573716][241 ms][DEBUG] START check_boot_completed [2025-09-06 07:53:22][355622367573716][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:53:22][355622367573716][288 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 07:53:22][355622367573716][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:53:22][355622367573716][350 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 07:53:22][355622367573716][350 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 07:53:22][355622367573716][350 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:53:22][355622367573716][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355622367573716\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4802\"}'\'' -e'"" [2025-09-06 07:53:22][355622367573716][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:53:22][355622367573716][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355622367573716\",\"model\":\"SM-S926B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4802\"}'\'' -e'"" [2025-09-06 07:53:27][355622367573716][5615 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a09cc6e5-6e34-4749-b154-3b90d412cd48","id":"QR_a09cc6e5-6e34-4749-b154-3b90d412cd48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:53:27][355622367573716][5771 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 07:53:27][355622367573716][5771 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-06 07:53:27][355622367573716][5771 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:57:03][352388501650116][1 ms][INFO] === Request start === [2025-09-06 07:57:03][352388501650116][1 ms][DEBUG] START check_scloud [2025-09-06 07:57:03][352388501650116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:57:03][352388501650116][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 18498 4061 23641284 138000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:57:03][352388501650116][327 ms][DEBUG] targetPkg: running [2025-09-06 07:57:03][352388501650116][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-06 07:57:03][352388501650116][327 ms][DEBUG] START check_boot_completed [2025-09-06 07:57:03][352388501650116][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:57:03][352388501650116][358 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 07:57:03][352388501650116][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:57:03][352388501650116][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 07:57:03][352388501650116][406 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 07:57:04][352388501650116][406 ms][DEBUG] rawBody.length=1150 [2025-09-06 07:57:04][352388501650116][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352388501650116\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1323\"}'\'' -e'"" [2025-09-06 07:57:04][352388501650116][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:57:04][352388501650116][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352388501650116\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1323\"}'\'' -e'"" [2025-09-06 07:57:08][352388501650116][5107 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eecf3e72-d3bd-4b96-9e40-e7db9170eb1d","id":"QR_eecf3e72-d3bd-4b96-9e40-e7db9170eb1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:57:08][352388501650116][5263 ms][DEBUG] proc_open done in 4857 ms; code=255; res.len=3343 [2025-09-06 07:57:08][352388501650116][5264 ms][DEBUG] END runCmdUntilRes#1 in 4857 ms [2025-09-06 07:57:08][352388501650116][5264 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 07:57:11][352388501650116][0 ms][INFO] === Request start === [2025-09-06 07:57:11][352388501650116][1 ms][DEBUG] START check_scloud [2025-09-06 07:57:11][352388501650116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 07:57:11][352388501650116][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 18498 4061 23797644 149468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 07:57:11][352388501650116][286 ms][DEBUG] targetPkg: running [2025-09-06 07:57:11][352388501650116][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 07:57:11][352388501650116][286 ms][DEBUG] START check_boot_completed [2025-09-06 07:57:11][352388501650116][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 07:57:11][352388501650116][333 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 07:57:11][352388501650116][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 07:57:11][352388501650116][395 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 07:57:11][352388501650116][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 07:57:11][352388501650116][395 ms][DEBUG] rawBody.length=1160 [2025-09-06 07:57:11][352388501650116][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352388501650116\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1162\"}'\'' -e'"" [2025-09-06 07:57:11][352388501650116][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 07:57:11][352388501650116][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352388501650116\",\"model\":\"SM-A217F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1162\"}'\'' -e'"" [2025-09-06 07:57:17][352388501650116][5941 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fdc25727-5fb4-4f24-8d3d-20b34df04476","id":"QR_fdc25727-5fb4-4f24-8d3d-20b34df04476","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 07:57:17][352388501650116][6097 ms][DEBUG] proc_open done in 5701 ms; code=255; res.len=3343 [2025-09-06 07:57:17][352388501650116][6097 ms][DEBUG] END runCmdUntilRes#1 in 5702 ms [2025-09-06 07:57:17][352388501650116][6097 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:00:03][352600226365774][1 ms][INFO] === Request start === [2025-09-06 08:00:03][352600226365774][1 ms][DEBUG] START check_scloud [2025-09-06 08:00:03][352600226365774][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:00:04][352600226365774][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 18498 4061 23943080 160732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:00:04][352600226365774][302 ms][DEBUG] targetPkg: running [2025-09-06 08:00:04][352600226365774][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 08:00:04][352600226365774][302 ms][DEBUG] START check_boot_completed [2025-09-06 08:00:04][352600226365774][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:00:04][352600226365774][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:00:04][352600226365774][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:00:04][352600226365774][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:00:04][352600226365774][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:00:04][352600226365774][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:00:04][352600226365774][492 ms][DEBUG] SU: done in 112 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1761\nsuccessfulTxPacketsPerSecond: 0.11284389176013902\nretriedTxPackets: 356\nretriedTxPacketsPerSecond: 0.07522926117342602\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1662\nsuccessfulRxPacketsPerSecond: 0.07522926117342602\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:00:04][352600226365774][492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:00:05][352600226365774][1833 ms][DEBUG] SU: done in 1341 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.928/302.928/302.928/0.000 ms\n [2025-09-06 08:00:05][352600226365774][1833 ms][DEBUG] check_internet: online [2025-09-06 08:00:05][352600226365774][1833 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:00:05][352600226365774][1833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226365774\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1718\"}'\'' -e'"" [2025-09-06 08:00:05][352600226365774][1833 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:00:05][352600226365774][1833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226365774\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1718\"}'\'' -e'"" [2025-09-06 08:00:09][352600226365774][5707 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c00df475-f12a-4ce2-9226-337068c8a3df","id":"QR_c00df475-f12a-4ce2-9226-337068c8a3df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:00:09][352600226365774][5863 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-06 08:00:09][352600226365774][5863 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-06 08:00:09][352600226365774][5863 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:00:12][352600226365774][0 ms][INFO] === Request start === [2025-09-06 08:00:12][352600226365774][1 ms][DEBUG] START check_scloud [2025-09-06 08:00:12][352600226365774][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:00:12][352600226365774][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 18498 4061 24097904 171444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:00:12][352600226365774][329 ms][DEBUG] targetPkg: running [2025-09-06 08:00:12][352600226365774][329 ms][DEBUG] END check_scloud in 328 ms [2025-09-06 08:00:12][352600226365774][329 ms][DEBUG] START check_boot_completed [2025-09-06 08:00:12][352600226365774][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:00:12][352600226365774][360 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:00:12][352600226365774][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:00:12][352600226365774][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:00:12][352600226365774][407 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:00:12][352600226365774][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:00:12][352600226365774][516 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1761\nsuccessfulTxPacketsPerSecond: 0.11284389176013902\nretriedTxPackets: 356\nretriedTxPacketsPerSecond: 0.07522926117342602\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1662\nsuccessfulRxPacketsPerSecond: 0.07522926117342602\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:00:12][352600226365774][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:00:13][352600226365774][1000 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=347 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 347.873/347.873/347.873/0.000 ms\n [2025-09-06 08:00:13][352600226365774][1000 ms][DEBUG] check_internet: online [2025-09-06 08:00:13][352600226365774][1000 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:00:13][352600226365774][1000 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226365774\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6180\"}'\'' -e'"" [2025-09-06 08:00:13][352600226365774][1000 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:00:13][352600226365774][1000 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226365774\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6180\"}'\'' -e'"" [2025-09-06 08:00:18][352600226365774][6265 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de60623c-f23d-4a3d-8b35-5edd193dd5aa","id":"QR_de60623c-f23d-4a3d-8b35-5edd193dd5aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:00:18][352600226365774][6421 ms][DEBUG] proc_open done in 5421 ms; code=255; res.len=3343 [2025-09-06 08:00:18][352600226365774][6421 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-09-06 08:00:18][352600226365774][6421 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:02:03][352990182112736][0 ms][INFO] === Request start === [2025-09-06 08:02:03][352990182112736][1 ms][DEBUG] START check_scloud [2025-09-06 08:02:03][352990182112736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:02:04][352990182112736][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 18498 4061 24233968 183448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:02:04][352990182112736][253 ms][DEBUG] targetPkg: running [2025-09-06 08:02:04][352990182112736][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-06 08:02:04][352990182112736][253 ms][DEBUG] START check_boot_completed [2025-09-06 08:02:04][352990182112736][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:02:04][352990182112736][298 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 08:02:04][352990182112736][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:02:04][352990182112736][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:02:04][352990182112736][345 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 08:02:04][352990182112736][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:02:04][352990182112736][454 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1761\nsuccessfulTxPacketsPerSecond: 0.11284389176013902\nretriedTxPackets: 356\nretriedTxPacketsPerSecond: 0.07522926117342602\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1662\nsuccessfulRxPacketsPerSecond: 0.07522926117342602\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:02:04][352990182112736][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:02:04][352990182112736][860 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.227/290.227/290.227/0.000 ms\n [2025-09-06 08:02:04][352990182112736][860 ms][DEBUG] check_internet: online [2025-09-06 08:02:04][352990182112736][860 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:02:04][352990182112736][860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990182112736\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8109\"}'\'' -e'"" [2025-09-06 08:02:04][352990182112736][860 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:02:04][352990182112736][860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990182112736\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8109\"}'\'' -e'"" [2025-09-06 08:02:09][352990182112736][5281 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 08:02:09][352990182112736][5437 ms][DEBUG] proc_open done in 4577 ms; code=255; res.len=115 [2025-09-06 08:02:09][352990182112736][5437 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-09-06 08:02:09][352990182112736][5437 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 08:02:09][][1 ms][INFO] === Request start === [2025-09-06 08:02:09][][1 ms][DEBUG] START check_scloud [2025-09-06 08:02:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:02:09][][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 18498 4061 24359280 194344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:02:09][][323 ms][DEBUG] targetPkg: running [2025-09-06 08:02:09][][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 08:02:09][][323 ms][DEBUG] START check_boot_completed [2025-09-06 08:02:09][][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:02:09][][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:02:09][][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:02:10][][432 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:02:10][][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:02:10][][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:02:10][][541 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1761\nsuccessfulTxPacketsPerSecond: 0.11284389176013902\nretriedTxPackets: 356\nretriedTxPacketsPerSecond: 0.07522926117342602\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1662\nsuccessfulRxPacketsPerSecond: 0.07522926117342602\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:02:10][][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:02:10][][869 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.772/226.772/226.772/0.000 ms\n [2025-09-06 08:02:10][][869 ms][DEBUG] check_internet: online [2025-09-06 08:02:10][][869 ms][DEBUG] rawBody.length=1131 [2025-09-06 08:02:10][][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW91NX52W\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9667\"}'\'' -e'"" [2025-09-06 08:02:10][][870 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:02:10][][870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW91NX52W\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9667\"}'\'' -e'"" [2025-09-06 08:02:13][][4103 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-06 08:02:13][][4259 ms][DEBUG] proc_open done in 3389 ms; code=255; res.len=95 [2025-09-06 08:02:13][][4259 ms][DEBUG] END runCmdUntilRes#1 in 3389 ms [2025-09-06 08:02:13][][4259 ms][INFO] SUCCESS response from frida (len=95) [2025-09-06 08:02:15][352990182112736][0 ms][INFO] === Request start === [2025-09-06 08:02:15][352990182112736][1 ms][DEBUG] START check_scloud [2025-09-06 08:02:15][352990182112736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:02:15][352990182112736][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18498 4061 24503736 206116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:02:15][352990182112736][305 ms][DEBUG] targetPkg: running [2025-09-06 08:02:15][352990182112736][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 08:02:15][352990182112736][305 ms][DEBUG] START check_boot_completed [2025-09-06 08:02:15][352990182112736][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:02:15][352990182112736][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:02:15][352990182112736][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:02:15][352990182112736][400 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 08:02:15][352990182112736][400 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 08:02:15][352990182112736][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:02:16][352990182112736][523 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1761\nsuccessfulTxPacketsPerSecond: 0.11284389176013902\nretriedTxPackets: 356\nretriedTxPacketsPerSecond: 0.07522926117342602\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1662\nsuccessfulRxPacketsPerSecond: 0.07522926117342602\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:02:16][352990182112736][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:02:16][352990182112736][898 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=279 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 279.597/279.597/279.597/0.000 ms\n [2025-09-06 08:02:16][352990182112736][898 ms][DEBUG] check_internet: online [2025-09-06 08:02:16][352990182112736][898 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:02:16][352990182112736][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990182112736\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5092\"}'\'' -e'"" [2025-09-06 08:02:16][352990182112736][898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:02:16][352990182112736][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990182112736\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5092\"}'\'' -e'"" [2025-09-06 08:02:21][352990182112736][6053 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b45e4b31-259b-48f4-b8bb-00b784b8a00d","id":"QR_b45e4b31-259b-48f4-b8bb-00b784b8a00d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:02:21][352990182112736][6209 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 08:02:21][352990182112736][6209 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 08:02:21][352990182112736][6209 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:02:26][350178733113567][0 ms][INFO] === Request start === [2025-09-06 08:02:26][350178733113567][1 ms][DEBUG] START check_scloud [2025-09-06 08:02:26][350178733113567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:02:26][350178733113567][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 18498 4061 24644124 216776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:02:26][350178733113567][290 ms][DEBUG] targetPkg: running [2025-09-06 08:02:26][350178733113567][290 ms][DEBUG] END check_scloud in 290 ms [2025-09-06 08:02:26][350178733113567][290 ms][DEBUG] START check_boot_completed [2025-09-06 08:02:26][350178733113567][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:02:26][350178733113567][337 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:02:26][350178733113567][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:02:26][350178733113567][416 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 08:02:26][350178733113567][416 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 08:02:26][350178733113567][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:02:26][350178733113567][540 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1761\nsuccessfulTxPacketsPerSecond: 0.11284389176013902\nretriedTxPackets: 356\nretriedTxPacketsPerSecond: 0.07522926117342602\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1662\nsuccessfulRxPacketsPerSecond: 0.07522926117342602\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:02:26][350178733113567][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:02:27][350178733113567][978 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=340 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 340.590/340.590/340.590/0.000 ms\n [2025-09-06 08:02:27][350178733113567][978 ms][DEBUG] check_internet: online [2025-09-06 08:02:27][350178733113567][978 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:02:27][350178733113567][978 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733113567\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4685\"}'\'' -e'"" [2025-09-06 08:02:27][350178733113567][978 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:02:27][350178733113567][978 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733113567\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4685\"}'\'' -e'"" [2025-09-06 08:02:30][350178733113567][4524 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a097c4cd-dcf1-48e5-912e-c052a4d35ba6","id":"QR_a097c4cd-dcf1-48e5-912e-c052a4d35ba6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:02:30][350178733113567][4680 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-06 08:02:30][350178733113567][4680 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-06 08:02:30][350178733113567][4680 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:02:33][350178733113567][0 ms][INFO] === Request start === [2025-09-06 08:02:33][350178733113567][1 ms][DEBUG] START check_scloud [2025-09-06 08:02:33][350178733113567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:02:33][350178733113567][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 18498 4061 24747648 228648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:02:33][350178733113567][284 ms][DEBUG] targetPkg: running [2025-09-06 08:02:33][350178733113567][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-06 08:02:33][350178733113567][284 ms][DEBUG] START check_boot_completed [2025-09-06 08:02:33][350178733113567][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:02:33][350178733113567][330 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:02:33][350178733113567][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:02:33][350178733113567][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:02:33][350178733113567][377 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:02:33][350178733113567][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:02:33][350178733113567][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1761\nsuccessfulTxPacketsPerSecond: 0.11284389176013902\nretriedTxPackets: 356\nretriedTxPacketsPerSecond: 0.07522926117342602\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1662\nsuccessfulRxPacketsPerSecond: 0.07522926117342602\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:02:33][350178733113567][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:02:34][350178733113567][862 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.064/275.064/275.064/0.000 ms\n [2025-09-06 08:02:34][350178733113567][862 ms][DEBUG] check_internet: online [2025-09-06 08:02:34][350178733113567][862 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:02:34][350178733113567][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733113567\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2968\"}'\'' -e'"" [2025-09-06 08:02:34][350178733113567][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:02:34][350178733113567][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733113567\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2968\"}'\'' -e'"" [2025-09-06 08:02:38][350178733113567][5704 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab5e9981-c721-48db-b5f7-b74bfc07ff0d","id":"QR_ab5e9981-c721-48db-b5f7-b74bfc07ff0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:02:39][350178733113567][5860 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-06 08:02:39][350178733113567][5860 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-06 08:02:39][350178733113567][5860 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:11:03][357107761230442][1 ms][INFO] === Request start === [2025-09-06 08:11:03][357107761230442][1 ms][DEBUG] START check_scloud [2025-09-06 08:11:03][357107761230442][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:11:04][357107761230442][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 18498 4061 24863444 139512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:11:04][357107761230442][295 ms][DEBUG] targetPkg: running [2025-09-06 08:11:04][357107761230442][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 08:11:04][357107761230442][295 ms][DEBUG] START check_boot_completed [2025-09-06 08:11:04][357107761230442][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:11:04][357107761230442][342 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:11:04][357107761230442][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:11:04][357107761230442][404 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:11:04][357107761230442][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:11:04][357107761230442][404 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:11:04][357107761230442][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357107761230442\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8554\"}'\'' -e'"" [2025-09-06 08:11:04][357107761230442][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:11:04][357107761230442][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357107761230442\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8554\"}'\'' -e'"" [2025-09-06 08:11:08][357107761230442][4919 ms][DEBUG] proc_open done in 4514 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 08:11:08][357107761230442][4919 ms][DEBUG] END runCmdUntilRes#1 in 4515 ms [2025-09-06 08:11:08][357107761230442][4919 ms][WARN] Detected error: Process with pid 18498 either refused to load frida-agent, or terminated during injectionProcess with pid 18498 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 08:11:08][357107761230442][4919 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 08:11:09][357107761230442][5184 ms][DEBUG] SU: done in 265 ms; outsystem 4402 4061 12872740 205480 ep_poll 0 S system_server\n [2025-09-06 08:11:09][357107761230442][5184 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 08:11:09][357107761230442][5325 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 08:11:09][357107761230442][5325 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 08:11:09][357107761230442][5325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 08:11:09][357107761230442][5450 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 08:11:09][357107761230442][5450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 08:11:09][357107761230442][5622 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 08:11:11][357107761230442][7637 ms][DEBUG] START check_boot_completed [2025-09-06 08:11:11][357107761230442][7637 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:11:11][357107761230442][7684 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:11:11][357107761230442][7684 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:11:11][357107761230442][7731 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:11:11][357107761230442][7731 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 08:11:14][357107761230442][10745 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 08:11:14][357107761230442][10746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357107761230442\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8554\"}'\'' -e'"" [2025-09-06 08:11:18][357107761230442][14698 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3576a136-5373-4b24-9b56-4698eb33730f","id":"QR_3576a136-5373-4b24-9b56-4698eb33730f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:11:18][357107761230442][14854 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-06 08:11:18][357107761230442][14854 ms][DEBUG] END runCmdUntilRes#2 in 4108 ms [2025-09-06 08:11:18][357107761230442][14854 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:11:21][357107761230442][0 ms][INFO] === Request start === [2025-09-06 08:11:21][357107761230442][1 ms][DEBUG] START check_scloud [2025-09-06 08:11:21][357107761230442][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:11:21][357107761230442][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 21382 4061 23598460 124196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:11:21][357107761230442][251 ms][DEBUG] targetPkg: running [2025-09-06 08:11:21][357107761230442][251 ms][DEBUG] END check_scloud in 250 ms [2025-09-06 08:11:21][357107761230442][251 ms][DEBUG] START check_boot_completed [2025-09-06 08:11:21][357107761230442][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:11:21][357107761230442][298 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:11:21][357107761230442][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:11:21][357107761230442][360 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:11:21][357107761230442][360 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:11:21][357107761230442][360 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:11:21][357107761230442][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357107761230442\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2587\"}'\'' -e'"" [2025-09-06 08:11:21][357107761230442][361 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:11:21][357107761230442][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357107761230442\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2587\"}'\'' -e'"" [2025-09-06 08:11:26][357107761230442][5890 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_930653ed-e9e4-4826-8a18-da2732458595","id":"QR_930653ed-e9e4-4826-8a18-da2732458595","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:11:27][357107761230442][6046 ms][DEBUG] proc_open done in 5686 ms; code=255; res.len=3343 [2025-09-06 08:11:27][357107761230442][6046 ms][DEBUG] END runCmdUntilRes#1 in 5686 ms [2025-09-06 08:11:27][357107761230442][6047 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:16:03][350144374311415][1 ms][INFO] === Request start === [2025-09-06 08:16:03][350144374311415][1 ms][DEBUG] START check_scloud [2025-09-06 08:16:03][350144374311415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:16:03][350144374311415][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 21382 4061 23674088 137792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:16:03][350144374311415][309 ms][DEBUG] targetPkg: running [2025-09-06 08:16:03][350144374311415][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 08:16:03][350144374311415][309 ms][DEBUG] START check_boot_completed [2025-09-06 08:16:03][350144374311415][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:16:03][350144374311415][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:16:03][350144374311415][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:16:03][350144374311415][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:16:03][350144374311415][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:16:03][350144374311415][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:16:03][350144374311415][527 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2102\nsuccessfulTxPacketsPerSecond: 0.5265998331888727\nretriedTxPackets: 458\nretriedTxPacketsPerSecond: 0.14391548236217638\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1956\nsuccessfulRxPacketsPerSecond: 0.4611837048424289\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:16:03][350144374311415][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:16:05][350144374311415][2449 ms][DEBUG] SU: done in 1921 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=407 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 407.533/407.533/407.533/0.000 ms\n [2025-09-06 08:16:05][350144374311415][2449 ms][DEBUG] check_internet: online [2025-09-06 08:16:05][350144374311415][2449 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:16:05][350144374311415][2449 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350144374311415\",\"model\":\"SM-F966B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3594\"}'\'' -e'"" [2025-09-06 08:16:05][350144374311415][2449 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:16:05][350144374311415][2449 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350144374311415\",\"model\":\"SM-F966B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3594\"}'\'' -e'"" [2025-09-06 08:16:11][350144374311415][8307 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e7be691-6faf-4a3b-afda-0e4ccff9c7f5","id":"QR_3e7be691-6faf-4a3b-afda-0e4ccff9c7f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:16:11][350144374311415][8463 ms][DEBUG] proc_open done in 6014 ms; code=255; res.len=3343 [2025-09-06 08:16:11][350144374311415][8463 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-09-06 08:16:11][350144374311415][8463 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:16:14][350144374311415][0 ms][INFO] === Request start === [2025-09-06 08:16:14][350144374311415][1 ms][DEBUG] START check_scloud [2025-09-06 08:16:14][350144374311415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:16:14][350144374311415][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 21382 4061 23812080 149780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:16:14][350144374311415][314 ms][DEBUG] targetPkg: running [2025-09-06 08:16:14][350144374311415][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 08:16:14][350144374311415][314 ms][DEBUG] START check_boot_completed [2025-09-06 08:16:14][350144374311415][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:16:14][350144374311415][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:16:14][350144374311415][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:16:14][350144374311415][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:16:14][350144374311415][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:16:14][350144374311415][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:16:14][350144374311415][517 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2102\nsuccessfulTxPacketsPerSecond: 0.5265998331888727\nretriedTxPackets: 458\nretriedTxPacketsPerSecond: 0.14391548236217638\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1956\nsuccessfulRxPacketsPerSecond: 0.4611837048424289\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:16:14][350144374311415][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:16:15][350144374311415][1095 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=467 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 467.638/467.638/467.638/0.000 ms\n [2025-09-06 08:16:15][350144374311415][1095 ms][DEBUG] check_internet: online [2025-09-06 08:16:15][350144374311415][1095 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:16:15][350144374311415][1095 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350144374311415\",\"model\":\"SM-F966B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6594\"}'\'' -e'"" [2025-09-06 08:16:15][350144374311415][1095 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:16:15][350144374311415][1095 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350144374311415\",\"model\":\"SM-F966B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6594\"}'\'' -e'"" [2025-09-06 08:16:20][350144374311415][6359 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9af1c15c-86a3-4da3-8d8f-a572a763b8b5","id":"QR_9af1c15c-86a3-4da3-8d8f-a572a763b8b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:16:20][350144374311415][6515 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 08:16:20][350144374311415][6515 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-09-06 08:16:20][350144374311415][6515 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:17:03][350938284402077][0 ms][INFO] === Request start === [2025-09-06 08:17:03][350938284402077][1 ms][DEBUG] START check_scloud [2025-09-06 08:17:03][350938284402077][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:17:03][350938284402077][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 21382 4061 23909360 160784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:17:03][350938284402077][330 ms][DEBUG] targetPkg: running [2025-09-06 08:17:03][350938284402077][330 ms][DEBUG] END check_scloud in 329 ms [2025-09-06 08:17:03][350938284402077][330 ms][DEBUG] START check_boot_completed [2025-09-06 08:17:03][350938284402077][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:17:03][350938284402077][361 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:17:03][350938284402077][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:17:03][350938284402077][409 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 08:17:03][350938284402077][410 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-06 08:17:03][350938284402077][410 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:17:03][350938284402077][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938284402077\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7603\"}'\'' -e'"" [2025-09-06 08:17:03][350938284402077][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:17:03][350938284402077][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938284402077\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7603\"}'\'' -e'"" [2025-09-06 08:17:07][350938284402077][4219 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8078340c-29f9-4316-849f-643aced7a31f","id":"QR_8078340c-29f9-4316-849f-643aced7a31f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:17:07][350938284402077][4375 ms][DEBUG] proc_open done in 3966 ms; code=255; res.len=3343 [2025-09-06 08:17:07][350938284402077][4376 ms][DEBUG] END runCmdUntilRes#1 in 3966 ms [2025-09-06 08:17:07][350938284402077][4376 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:17:10][350938284402077][0 ms][INFO] === Request start === [2025-09-06 08:17:10][350938284402077][1 ms][DEBUG] START check_scloud [2025-09-06 08:17:10][350938284402077][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:17:10][350938284402077][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 21382 4061 24084728 171636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:17:10][350938284402077][276 ms][DEBUG] targetPkg: running [2025-09-06 08:17:10][350938284402077][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-06 08:17:10][350938284402077][276 ms][DEBUG] START check_boot_completed [2025-09-06 08:17:10][350938284402077][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:17:10][350938284402077][322 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:17:10][350938284402077][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:17:10][350938284402077][369 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:17:10][350938284402077][369 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:17:10][350938284402077][369 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:17:10][350938284402077][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938284402077\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9792\"}'\'' -e'"" [2025-09-06 08:17:10][350938284402077][369 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:17:10][350938284402077][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938284402077\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9792\"}'\'' -e'"" [2025-09-06 08:17:15][350938284402077][5321 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74c912a8-c391-4539-9351-fb924508b9d8","id":"QR_74c912a8-c391-4539-9351-fb924508b9d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:17:15][350938284402077][5477 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 08:17:15][350938284402077][5477 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 08:17:15][350938284402077][5477 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:18:03][354360418752440][0 ms][INFO] === Request start === [2025-09-06 08:18:03][354360418752440][1 ms][DEBUG] START check_scloud [2025-09-06 08:18:03][354360418752440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:18:03][354360418752440][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 21382 4061 24198584 183684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:18:03][354360418752440][303 ms][DEBUG] targetPkg: running [2025-09-06 08:18:03][354360418752440][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 08:18:03][354360418752440][303 ms][DEBUG] START check_boot_completed [2025-09-06 08:18:03][354360418752440][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:18:03][354360418752440][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:18:03][354360418752440][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:18:03][354360418752440][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:18:03][354360418752440][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 08:18:03][354360418752440][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:18:03][354360418752440][521 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2168\nsuccessfulTxPacketsPerSecond: 0.21922249089894508\nretriedTxPackets: 485\nretriedTxPacketsPerSecond: 0.08968192809502298\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2011\nsuccessfulRxPacketsPerSecond: 0.18268540908245423\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:18:03][354360418752440][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:18:04][354360418752440][959 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.081/316.081/316.081/0.000 ms\n [2025-09-06 08:18:04][354360418752440][959 ms][DEBUG] check_internet: online [2025-09-06 08:18:04][354360418752440][959 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:18:04][354360418752440][959 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418752440\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1030\"}'\'' -e'"" [2025-09-06 08:18:04][354360418752440][959 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:18:04][354360418752440][959 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418752440\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1030\"}'\'' -e'"" [2025-09-06 08:18:09][354360418752440][5832 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_941b7e8f-2f98-4436-8ad3-11a4bb89d517","id":"QR_941b7e8f-2f98-4436-8ad3-11a4bb89d517","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:18:09][354360418752440][5989 ms][DEBUG] proc_open done in 5029 ms; code=255; res.len=3343 [2025-09-06 08:18:09][354360418752440][5989 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-06 08:18:09][354360418752440][5989 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:18:11][354360418752440][1 ms][INFO] === Request start === [2025-09-06 08:18:11][354360418752440][1 ms][DEBUG] START check_scloud [2025-09-06 08:18:11][354360418752440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:18:11][354360418752440][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 21382 4061 24318656 194576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:18:11][354360418752440][309 ms][DEBUG] targetPkg: running [2025-09-06 08:18:11][354360418752440][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 08:18:11][354360418752440][309 ms][DEBUG] START check_boot_completed [2025-09-06 08:18:11][354360418752440][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:18:11][354360418752440][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:18:11][354360418752440][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:18:11][354360418752440][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:18:11][354360418752440][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:18:11][354360418752440][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:18:12][354360418752440][527 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2168\nsuccessfulTxPacketsPerSecond: 0.21922249089894508\nretriedTxPackets: 485\nretriedTxPacketsPerSecond: 0.08968192809502298\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2011\nsuccessfulRxPacketsPerSecond: 0.18268540908245423\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:18:12][354360418752440][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:18:12][354360418752440][933 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=285 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 285.593/285.593/285.593/0.000 ms\n [2025-09-06 08:18:12][354360418752440][933 ms][DEBUG] check_internet: online [2025-09-06 08:18:12][354360418752440][934 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:18:12][354360418752440][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418752440\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4566\"}'\'' -e'"" [2025-09-06 08:18:12][354360418752440][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:18:12][354360418752440][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418752440\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4566\"}'\'' -e'"" [2025-09-06 08:18:17][354360418752440][6182 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de5e7071-ee2b-4d64-b7e4-e0db44941205","id":"QR_de5e7071-ee2b-4d64-b7e4-e0db44941205","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:18:17][354360418752440][6338 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-06 08:18:17][354360418752440][6338 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-06 08:18:17][354360418752440][6338 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:19:03][350471122800476][0 ms][INFO] === Request start === [2025-09-06 08:19:03][350471122800476][1 ms][DEBUG] START check_scloud [2025-09-06 08:19:03][350471122800476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:19:03][350471122800476][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 21382 4061 24472448 206700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:19:03][350471122800476][309 ms][DEBUG] targetPkg: running [2025-09-06 08:19:03][350471122800476][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 08:19:03][350471122800476][309 ms][DEBUG] START check_boot_completed [2025-09-06 08:19:03][350471122800476][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:19:03][350471122800476][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:19:03][350471122800476][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:19:04][350471122800476][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:19:04][350471122800476][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:19:04][350471122800476][418 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:19:04][350471122800476][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471122800476\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6465\"}'\'' -e'"" [2025-09-06 08:19:04][350471122800476][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:19:04][350471122800476][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471122800476\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6465\"}'\'' -e'"" [2025-09-06 08:19:07][350471122800476][3933 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_457bf21b-47fe-4a7f-805e-c43368fc8f0b","id":"QR_457bf21b-47fe-4a7f-805e-c43368fc8f0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:19:07][350471122800476][4089 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=3343 [2025-09-06 08:19:07][350471122800476][4089 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-09-06 08:19:07][350471122800476][4089 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:20:03][357962508258241][0 ms][INFO] === Request start === [2025-09-06 08:20:03][357962508258241][1 ms][DEBUG] START check_scloud [2025-09-06 08:20:03][357962508258241][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:20:03][357962508258241][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 21382 4061 24615012 217712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:20:03][357962508258241][314 ms][DEBUG] targetPkg: running [2025-09-06 08:20:03][357962508258241][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 08:20:03][357962508258241][314 ms][DEBUG] START check_boot_completed [2025-09-06 08:20:03][357962508258241][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:20:03][357962508258241][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:20:03][357962508258241][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:20:03][357962508258241][409 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 08:20:03][357962508258241][409 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 08:20:03][357962508258241][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:20:03][357962508258241][534 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2168\nsuccessfulTxPacketsPerSecond: 0.21922249089894508\nretriedTxPackets: 485\nretriedTxPacketsPerSecond: 0.08968192809502298\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2011\nsuccessfulRxPacketsPerSecond: 0.18268540908245423\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:20:03][357962508258241][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:20:04][357962508258241][1017 ms][DEBUG] SU: done in 482 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=344 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 344.342/344.342/344.342/0.000 ms\n [2025-09-06 08:20:04][357962508258241][1017 ms][DEBUG] check_internet: online [2025-09-06 08:20:04][357962508258241][1017 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:20:04][357962508258241][1017 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508258241\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3884\"}'\'' -e'"" [2025-09-06 08:20:04][357962508258241][1017 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:20:04][357962508258241][1017 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508258241\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3884\"}'\'' -e'"" [2025-09-06 08:20:08][357962508258241][5625 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b5308e6-8403-4277-9ae7-130081b63e66","id":"QR_8b5308e6-8403-4277-9ae7-130081b63e66","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:20:09][357962508258241][5781 ms][DEBUG] proc_open done in 4763 ms; code=255; res.len=3343 [2025-09-06 08:20:09][357962508258241][5781 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-06 08:20:09][357962508258241][5781 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:20:11][357962508258241][0 ms][INFO] === Request start === [2025-09-06 08:20:11][357962508258241][1 ms][DEBUG] START check_scloud [2025-09-06 08:20:11][357962508258241][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:20:11][357962508258241][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 21382 4061 24746344 229584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:20:11][357962508258241][271 ms][DEBUG] targetPkg: running [2025-09-06 08:20:11][357962508258241][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-06 08:20:11][357962508258241][271 ms][DEBUG] START check_boot_completed [2025-09-06 08:20:11][357962508258241][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:20:11][357962508258241][317 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:20:11][357962508258241][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:20:11][357962508258241][395 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 08:20:11][357962508258241][395 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 08:20:11][357962508258241][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:20:11][357962508258241][505 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2168\nsuccessfulTxPacketsPerSecond: 0.21922249089894508\nretriedTxPackets: 485\nretriedTxPacketsPerSecond: 0.08968192809502298\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2011\nsuccessfulRxPacketsPerSecond: 0.18268540908245423\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:20:11][357962508258241][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:20:12][357962508258241][833 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.721/226.721/226.721/0.000 ms\n [2025-09-06 08:20:12][357962508258241][833 ms][DEBUG] check_internet: online [2025-09-06 08:20:12][357962508258241][833 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:20:12][357962508258241][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508258241\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8986\"}'\'' -e'"" [2025-09-06 08:20:12][357962508258241][833 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:20:12][357962508258241][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508258241\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8986\"}'\'' -e'"" [2025-09-06 08:20:17][357962508258241][6441 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_730b252c-9f1c-4c38-93c2-9bb5077c6194","id":"QR_730b252c-9f1c-4c38-93c2-9bb5077c6194","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:20:17][357962508258241][6597 ms][DEBUG] proc_open done in 5764 ms; code=255; res.len=3343 [2025-09-06 08:20:17][357962508258241][6597 ms][DEBUG] END runCmdUntilRes#1 in 5764 ms [2025-09-06 08:20:17][357962508258241][6597 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:24:03][353684148920006][1 ms][INFO] === Request start === [2025-09-06 08:24:03][353684148920006][1 ms][DEBUG] START check_scloud [2025-09-06 08:24:03][353684148920006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:24:04][353684148920006][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 21382 4061 24884648 240972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:24:04][353684148920006][322 ms][DEBUG] targetPkg: running [2025-09-06 08:24:04][353684148920006][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-06 08:24:04][353684148920006][322 ms][DEBUG] START check_boot_completed [2025-09-06 08:24:04][353684148920006][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:24:04][353684148920006][353 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:24:04][353684148920006][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:24:04][353684148920006][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:24:04][353684148920006][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:24:04][353684148920006][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:24:04][353684148920006][527 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=29303199 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2359\nsuccessfulTxPacketsPerSecond: 0.6343828882688987\nretriedTxPackets: 542\nretriedTxPacketsPerSecond: 0.18931845356715823\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2173\nsuccessfulRxPacketsPerSecond: 0.538062973296134\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 121Mbps, Tx Link speed: 121Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:24:04][353684148920006][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:24:05][353684148920006][1900 ms][DEBUG] SU: done in 1373 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.538/300.538/300.538/0.000 ms\n [2025-09-06 08:24:05][353684148920006][1900 ms][DEBUG] check_internet: online [2025-09-06 08:24:05][353684148920006][1900 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:24:05][353684148920006][1900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684148920006\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5243\"}'\'' -e'"" [2025-09-06 08:24:05][353684148920006][1900 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:24:05][353684148920006][1900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684148920006\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5243\"}'\'' -e'"" [2025-09-06 08:24:13][353684148920006][9773 ms][DEBUG] proc_open done in 7873 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 08:24:13][353684148920006][9773 ms][DEBUG] END runCmdUntilRes#1 in 7873 ms [2025-09-06 08:24:13][353684148920006][9774 ms][WARN] Detected error: Process with pid 21382 either refused to load frida-agent, or terminated during injectionProcess with pid 21382 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 08:24:13][353684148920006][9774 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 08:24:14][353684148920006][10257 ms][DEBUG] SU: done in 484 ms; out [2025-09-06 08:24:14][353684148920006][10258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 08:24:14][353684148920006][10632 ms][DEBUG] SU: done in 375 ms; out [2025-09-06 08:24:14][353684148920006][10632 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 08:24:14][353684148920006][10633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 08:24:14][353684148920006][10851 ms][DEBUG] SU: done in 218 ms; out [2025-09-06 08:24:14][353684148920006][10851 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 08:24:14][353684148920006][11070 ms][DEBUG] SU: done in 219 ms; out [2025-09-06 08:24:16][353684148920006][13085 ms][DEBUG] START check_boot_completed [2025-09-06 08:24:16][353684148920006][13085 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:24:16][353684148920006][13132 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:24:16][353684148920006][13132 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:24:17][353684148920006][13210 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 08:24:17][353684148920006][13210 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 08:24:20][353684148920006][16220 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 08:24:20][353684148920006][16220 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684148920006\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5243\"}'\'' -e'"" [2025-09-06 08:24:21][353684148920006][17657 ms][DEBUG] proc_open done in 1437 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-06 08:24:21][353684148920006][17657 ms][DEBUG] END runCmdUntilRes#2 in 1437 ms [2025-09-06 08:24:21][353684148920006][17657 ms][WARN] Detected error 2; Reboot the device [2025-09-06 08:24:21][353684148920006][17657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 08:24:21][353684148920006][17891 ms][DEBUG] SU: done in 234 ms; outsystem 23248 22906 7193476 123356 0 0 R system_server\n [2025-09-06 08:24:21][353684148920006][17891 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-06 08:24:22][353684148920006][18531 ms][DEBUG] SU: done in 640 ms; out [2025-09-06 08:25:03][353684148920006][0 ms][INFO] === Request start === [2025-09-06 08:25:03][353684148920006][1 ms][DEBUG] START check_scloud [2025-09-06 08:25:03][353684148920006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:25:03][353684148920006][35 ms][DEBUG] SU: done in 34 ms; out [2025-09-06 08:25:03][353684148920006][35 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 08:25:03][353684148920006][66 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 08:25:03][353684148920006][66 ms][WARN] check_devices: no device [2025-09-06 08:25:03][353684148920006][66 ms][WARN] check_devices: no device [2025-09-06 08:25:03][353684148920006][66 ms][DEBUG] END check_scloud in 65 ms [2025-09-06 08:25:07][353310800855377][0 ms][INFO] === Request start === [2025-09-06 08:25:07][353310800855377][1 ms][DEBUG] START check_scloud [2025-09-06 08:25:07][353310800855377][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:25:07][353310800855377][38 ms][DEBUG] SU: done in 37 ms; out [2025-09-06 08:25:07][353310800855377][38 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 08:25:07][353310800855377][69 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 08:25:07][353310800855377][69 ms][WARN] check_devices: no device [2025-09-06 08:25:07][353310800855377][69 ms][WARN] check_devices: no device [2025-09-06 08:25:07][353310800855377][69 ms][DEBUG] END check_scloud in 68 ms [2025-09-06 08:26:03][353684148920006][0 ms][INFO] === Request start === [2025-09-06 08:26:03][353684148920006][1 ms][DEBUG] START check_scloud [2025-09-06 08:26:03][353684148920006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:26:03][353684148920006][429 ms][DEBUG] SU: done in 428 ms; out [2025-09-06 08:26:03][353684148920006][429 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 08:26:03][353684148920006][476 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 08:26:03][353684148920006][476 ms][DEBUG] check_devices: device found [2025-09-06 08:26:03][353684148920006][476 ms][WARN] targetPkg: not running, restarting [2025-09-06 08:26:03][353684148920006][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 08:26:03][353684148920006][632 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 08:26:03][353684148920006][632 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 08:26:04][353684148920006][1007 ms][DEBUG] SU: done in 375 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 08:26:06][353684148920006][3022 ms][DEBUG] END check_scloud in 3021 ms [2025-09-06 08:26:06][353684148920006][3022 ms][DEBUG] START check_boot_completed [2025-09-06 08:26:06][353684148920006][3022 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:26:06][353684148920006][3069 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:26:06][353684148920006][3069 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:26:06][353684148920006][3116 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:26:06][353684148920006][3116 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 08:26:06][353684148920006][3116 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:26:06][353684148920006][3256 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 314\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 14\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 296\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:26:06][353684148920006][3257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:26:07][353684148920006][4397 ms][DEBUG] SU: done in 1140 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.837/221.837/221.837/0.000 ms\n [2025-09-06 08:26:07][353684148920006][4397 ms][DEBUG] check_internet: online [2025-09-06 08:26:07][353684148920006][4397 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:26:07][353684148920006][4397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684148920006\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8595\"}'\'' -e'"" [2025-09-06 08:26:07][353684148920006][4397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:26:07][353684148920006][4397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684148920006\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8595\"}'\'' -e'"" [2025-09-06 08:26:14][353684148920006][11192 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0ec9d70-1b1a-4316-9844-59848415e957","id":"QR_e0ec9d70-1b1a-4316-9844-59848415e957","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:26:14][353684148920006][11348 ms][DEBUG] proc_open done in 6951 ms; code=255; res.len=3343 [2025-09-06 08:26:14][353684148920006][11348 ms][DEBUG] END runCmdUntilRes#1 in 6951 ms [2025-09-06 08:26:14][353684148920006][11348 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:26:16][353684148920006][0 ms][INFO] === Request start === [2025-09-06 08:26:16][353684148920006][0 ms][DEBUG] START check_scloud [2025-09-06 08:26:16][353684148920006][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:26:17][353684148920006][329 ms][DEBUG] SU: done in 329 ms; outu0_a118 11605 4972 23672256 104468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:26:17][353684148920006][329 ms][DEBUG] targetPkg: running [2025-09-06 08:26:17][353684148920006][329 ms][DEBUG] END check_scloud in 329 ms [2025-09-06 08:26:17][353684148920006][329 ms][DEBUG] START check_boot_completed [2025-09-06 08:26:17][353684148920006][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:26:17][353684148920006][376 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:26:17][353684148920006][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:26:17][353684148920006][454 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 08:26:17][353684148920006][454 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 08:26:17][353684148920006][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:26:17][353684148920006][579 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 587\nsuccessfulTxPacketsPerSecond: 14.277511535492547\nretriedTxPackets: 37\nretriedTxPacketsPerSecond: 1.2028672722209839\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 570\nsuccessfulRxPacketsPerSecond: 14.329810112545633\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:26:17][353684148920006][579 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:26:17][353684148920006][954 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.235/255.235/255.235/0.000 ms\n [2025-09-06 08:26:17][353684148920006][954 ms][DEBUG] check_internet: online [2025-09-06 08:26:17][353684148920006][954 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:26:17][353684148920006][954 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684148920006\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2046\"}'\'' -e'"" [2025-09-06 08:26:17][353684148920006][954 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:26:17][353684148920006][954 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684148920006\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2046\"}'\'' -e'"" [2025-09-06 08:26:24][353684148920006][7530 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ebef3d98-d7a4-4db5-8628-8944530e9e4a","id":"QR_ebef3d98-d7a4-4db5-8628-8944530e9e4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:26:24][353684148920006][7686 ms][DEBUG] proc_open done in 6732 ms; code=255; res.len=3343 [2025-09-06 08:26:24][353684148920006][7686 ms][DEBUG] END runCmdUntilRes#1 in 6732 ms [2025-09-06 08:26:24][353684148920006][7686 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:26:28][353310800855377][0 ms][INFO] === Request start === [2025-09-06 08:26:28][353310800855377][1 ms][DEBUG] START check_scloud [2025-09-06 08:26:28][353310800855377][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:26:28][353310800855377][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 11605 4972 23828244 98616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:26:28][353310800855377][297 ms][DEBUG] targetPkg: running [2025-09-06 08:26:28][353310800855377][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 08:26:28][353310800855377][297 ms][DEBUG] START check_boot_completed [2025-09-06 08:26:28][353310800855377][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:26:28][353310800855377][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:26:28][353310800855377][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:26:29][353310800855377][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:26:29][353310800855377][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:26:29][353310800855377][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:26:29][353310800855377][500 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 865\nsuccessfulTxPacketsPerSecond: 6.268544507229909\nretriedTxPackets: 93\nretriedTxPacketsPerSecond: 1.7046471515194364\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 936\nsuccessfulRxPacketsPerSecond: 6.04200547795825\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:26:29][353310800855377][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:26:29][353310800855377][890 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.837/257.837/257.837/0.000 ms\n [2025-09-06 08:26:29][353310800855377][890 ms][DEBUG] check_internet: online [2025-09-06 08:26:29][353310800855377][891 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:26:29][353310800855377][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310800855377\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3478\"}'\'' -e'"" [2025-09-06 08:26:29][353310800855377][891 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:26:29][353310800855377][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310800855377\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3478\"}'\'' -e'"" [2025-09-06 08:26:33][353310800855377][4655 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c596e1a-1100-4b4b-90d9-6baa9af95179","id":"QR_8c596e1a-1100-4b4b-90d9-6baa9af95179","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:26:33][353310800855377][4811 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-06 08:26:33][353310800855377][4811 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-06 08:26:33][353310800855377][4811 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:26:35][353310800855377][1 ms][INFO] === Request start === [2025-09-06 08:26:35][353310800855377][1 ms][DEBUG] START check_scloud [2025-09-06 08:26:35][353310800855377][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:26:36][353310800855377][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11605 4972 23876232 90516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:26:36][353310800855377][313 ms][DEBUG] targetPkg: running [2025-09-06 08:26:36][353310800855377][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 08:26:36][353310800855377][313 ms][DEBUG] START check_boot_completed [2025-09-06 08:26:36][353310800855377][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:26:36][353310800855377][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:26:36][353310800855377][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:26:36][353310800855377][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:26:36][353310800855377][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:26:36][353310800855377][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:26:36][353310800855377][516 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 865\nsuccessfulTxPacketsPerSecond: 6.268544507229909\nretriedTxPackets: 93\nretriedTxPacketsPerSecond: 1.7046471515194364\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 936\nsuccessfulRxPacketsPerSecond: 6.04200547795825\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:26:36][353310800855377][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:26:36][353310800855377][860 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.173/227.173/227.173/0.000 ms\n [2025-09-06 08:26:36][353310800855377][860 ms][DEBUG] check_internet: online [2025-09-06 08:26:36][353310800855377][860 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:26:36][353310800855377][860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310800855377\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8407\"}'\'' -e'"" [2025-09-06 08:26:36][353310800855377][860 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:26:36][353310800855377][860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310800855377\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8407\"}'\'' -e'"" [2025-09-06 08:26:41][353310800855377][5718 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a994d233-6246-4885-9a46-3c1f6c68cfaf","id":"QR_a994d233-6246-4885-9a46-3c1f6c68cfaf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:26:41][353310800855377][5874 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 08:26:41][353310800855377][5874 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 08:26:41][353310800855377][5874 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:27:03][350482803917752][0 ms][INFO] === Request start === [2025-09-06 08:27:03][350482803917752][1 ms][DEBUG] START check_scloud [2025-09-06 08:27:03][350482803917752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:27:04][350482803917752][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 11605 4972 23948188 72504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:27:04][350482803917752][280 ms][DEBUG] targetPkg: running [2025-09-06 08:27:04][350482803917752][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-06 08:27:04][350482803917752][280 ms][DEBUG] START check_boot_completed [2025-09-06 08:27:04][350482803917752][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:27:04][350482803917752][326 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:27:04][350482803917752][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:27:04][350482803917752][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:27:04][350482803917752][373 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:27:04][350482803917752][373 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:27:04][350482803917752][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482803917752\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8533\"}'\'' -e'"" [2025-09-06 08:27:04][350482803917752][373 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:27:04][350482803917752][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482803917752\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8533\"}'\'' -e'"" [2025-09-06 08:27:08][350482803917752][4309 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f77b6a59-ec34-4c96-aa3d-03f91fe4829e","id":"QR_f77b6a59-ec34-4c96-aa3d-03f91fe4829e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:27:08][350482803917752][4466 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-09-06 08:27:08][350482803917752][4466 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-09-06 08:27:08][350482803917752][4466 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:27:10][350482803917752][0 ms][INFO] === Request start === [2025-09-06 08:27:10][350482803917752][1 ms][DEBUG] START check_scloud [2025-09-06 08:27:10][350482803917752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:27:11][350482803917752][334 ms][DEBUG] SU: done in 333 ms; outu0_a118 11605 4972 24071844 87168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:27:11][350482803917752][334 ms][DEBUG] targetPkg: running [2025-09-06 08:27:11][350482803917752][334 ms][DEBUG] END check_scloud in 333 ms [2025-09-06 08:27:11][350482803917752][334 ms][DEBUG] START check_boot_completed [2025-09-06 08:27:11][350482803917752][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:27:11][350482803917752][380 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:27:11][350482803917752][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:27:11][350482803917752][427 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:27:11][350482803917752][427 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 08:27:11][350482803917752][428 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:27:11][350482803917752][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482803917752\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5530\"}'\'' -e'"" [2025-09-06 08:27:11][350482803917752][428 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:27:11][350482803917752][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482803917752\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5530\"}'\'' -e'"" [2025-09-06 08:27:16][350482803917752][5817 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e180550-6a56-49b8-a944-021f01e4e6db","id":"QR_4e180550-6a56-49b8-a944-021f01e4e6db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:27:16][350482803917752][5973 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-09-06 08:27:16][350482803917752][5973 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-09-06 08:27:16][350482803917752][5973 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:28:03][351267960779767][0 ms][INFO] === Request start === [2025-09-06 08:28:03][351267960779767][1 ms][DEBUG] START check_scloud [2025-09-06 08:28:03][351267960779767][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:28:03][351267960779767][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 11605 4972 24192988 102580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:28:03][351267960779767][324 ms][DEBUG] targetPkg: running [2025-09-06 08:28:03][351267960779767][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-06 08:28:03][351267960779767][324 ms][DEBUG] START check_boot_completed [2025-09-06 08:28:03][351267960779767][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:28:03][351267960779767][355 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:28:03][351267960779767][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:28:03][351267960779767][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:28:03][351267960779767][402 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:28:03][351267960779767][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:28:03][351267960779767][527 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 865\nsuccessfulTxPacketsPerSecond: 6.268544507229909\nretriedTxPackets: 93\nretriedTxPacketsPerSecond: 1.7046471515194364\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 936\nsuccessfulRxPacketsPerSecond: 6.04200547795825\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:28:03][351267960779767][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:28:04][351267960779767][855 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.764/229.764/229.764/0.000 ms\n [2025-09-06 08:28:04][351267960779767][855 ms][DEBUG] check_internet: online [2025-09-06 08:28:04][351267960779767][855 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:28:04][351267960779767][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960779767\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2684\"}'\'' -e'"" [2025-09-06 08:28:04][351267960779767][855 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:28:04][351267960779767][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960779767\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2684\"}'\'' -e'"" [2025-09-06 08:28:07][351267960779767][4651 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d32fd060-02ce-4635-95f2-8df975f7f7b8","id":"QR_d32fd060-02ce-4635-95f2-8df975f7f7b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:28:08][351267960779767][4807 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-06 08:28:08][351267960779767][4807 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-06 08:28:08][351267960779767][4807 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:28:10][351267960779767][0 ms][INFO] === Request start === [2025-09-06 08:28:10][351267960779767][1 ms][DEBUG] START check_scloud [2025-09-06 08:28:10][351267960779767][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:28:10][351267960779767][326 ms][DEBUG] SU: done in 326 ms; outu0_a118 11605 4972 24336536 115860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:28:10][351267960779767][326 ms][DEBUG] targetPkg: running [2025-09-06 08:28:10][351267960779767][326 ms][DEBUG] END check_scloud in 326 ms [2025-09-06 08:28:10][351267960779767][326 ms][DEBUG] START check_boot_completed [2025-09-06 08:28:10][351267960779767][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:28:10][351267960779767][373 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:28:10][351267960779767][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:28:10][351267960779767][435 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:28:10][351267960779767][435 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:28:10][351267960779767][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:28:10][351267960779767][561 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 865\nsuccessfulTxPacketsPerSecond: 6.268544507229909\nretriedTxPackets: 93\nretriedTxPacketsPerSecond: 1.7046471515194364\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 936\nsuccessfulRxPacketsPerSecond: 6.04200547795825\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:28:10][351267960779767][561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:28:11][351267960779767][982 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.743/316.743/316.743/0.000 ms\n [2025-09-06 08:28:11][351267960779767][982 ms][DEBUG] check_internet: online [2025-09-06 08:28:11][351267960779767][982 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:28:11][351267960779767][982 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960779767\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4573\"}'\'' -e'"" [2025-09-06 08:28:11][351267960779767][982 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:28:11][351267960779767][982 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960779767\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4573\"}'\'' -e'"" [2025-09-06 08:28:16][351267960779767][6340 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49c624c1-1280-40df-81bc-4cc3870d46e5","id":"QR_49c624c1-1280-40df-81bc-4cc3870d46e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:28:16][351267960779767][6496 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-06 08:28:16][351267960779767][6496 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-06 08:28:16][351267960779767][6497 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:29:03][351771928343558][1 ms][INFO] === Request start === [2025-09-06 08:29:03][351771928343558][1 ms][DEBUG] START check_scloud [2025-09-06 08:29:03][351771928343558][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:29:03][351771928343558][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 11605 4972 24438104 127024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:29:03][351771928343558][306 ms][DEBUG] targetPkg: running [2025-09-06 08:29:03][351771928343558][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 08:29:03][351771928343558][306 ms][DEBUG] START check_boot_completed [2025-09-06 08:29:03][351771928343558][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:29:03][351771928343558][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:29:03][351771928343558][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:29:03][351771928343558][417 ms][DEBUG] SU: done in 64 ms; out [2025-09-06 08:29:03][351771928343558][417 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 08:29:03][351771928343558][417 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:29:03][351771928343558][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771928343558\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8604\"}'\'' -e'"" [2025-09-06 08:29:03][351771928343558][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:29:03][351771928343558][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771928343558\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8604\"}'\'' -e'"" [2025-09-06 08:29:07][351771928343558][3899 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f601012-f411-4c89-a557-91cc9df83c1e","id":"QR_6f601012-f411-4c89-a557-91cc9df83c1e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:29:07][351771928343558][4055 ms][DEBUG] proc_open done in 3638 ms; code=255; res.len=3343 [2025-09-06 08:29:07][351771928343558][4055 ms][DEBUG] END runCmdUntilRes#1 in 3638 ms [2025-09-06 08:29:07][351771928343558][4055 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:29:09][351771928343558][0 ms][INFO] === Request start === [2025-09-06 08:29:09][351771928343558][1 ms][DEBUG] START check_scloud [2025-09-06 08:29:09][351771928343558][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:29:10][351771928343558][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 11605 4972 24581728 138172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:29:10][351771928343558][286 ms][DEBUG] targetPkg: running [2025-09-06 08:29:10][351771928343558][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 08:29:10][351771928343558][286 ms][DEBUG] START check_boot_completed [2025-09-06 08:29:10][351771928343558][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:29:10][351771928343558][317 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:29:10][351771928343558][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:29:10][351771928343558][380 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 08:29:10][351771928343558][380 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 08:29:10][351771928343558][380 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:29:10][351771928343558][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771928343558\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8702\"}'\'' -e'"" [2025-09-06 08:29:10][351771928343558][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:29:10][351771928343558][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771928343558\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8702\"}'\'' -e'"" [2025-09-06 08:29:15][351771928343558][5269 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be2b3885-9703-46db-a232-067f9e26ea86","id":"QR_be2b3885-9703-46db-a232-067f9e26ea86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:29:15][351771928343558][5425 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-09-06 08:29:15][351771928343558][5425 ms][DEBUG] END runCmdUntilRes#1 in 5045 ms [2025-09-06 08:29:15][351771928343558][5425 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:29:19][351376414312792][0 ms][INFO] === Request start === [2025-09-06 08:29:19][351376414312792][1 ms][DEBUG] START check_scloud [2025-09-06 08:29:19][351376414312792][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:29:19][351376414312792][264 ms][DEBUG] SU: done in 264 ms; outu0_a118 11605 4972 24734440 145696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:29:19][351376414312792][264 ms][DEBUG] targetPkg: running [2025-09-06 08:29:19][351376414312792][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-06 08:29:19][351376414312792][265 ms][DEBUG] START check_boot_completed [2025-09-06 08:29:19][351376414312792][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:29:19][351376414312792][311 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:29:19][351376414312792][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:29:19][351376414312792][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:29:19][351376414312792][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:29:19][351376414312792][358 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:29:19][351376414312792][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376414312792\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1685\"}'\'' -e'"" [2025-09-06 08:29:19][351376414312792][358 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:29:19][351376414312792][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376414312792\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1685\"}'\'' -e'"" [2025-09-06 08:29:24][351376414312792][5029 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26d8663d-c544-4113-87f1-2111fa022ff0","id":"QR_26d8663d-c544-4113-87f1-2111fa022ff0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:29:24][351376414312792][5185 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-06 08:29:24][351376414312792][5185 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-06 08:29:24][351376414312792][5185 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:29:26][351376414312792][0 ms][INFO] === Request start === [2025-09-06 08:29:26][351376414312792][1 ms][DEBUG] START check_scloud [2025-09-06 08:29:26][351376414312792][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:29:27][351376414312792][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 11605 4972 24852300 156932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:29:27][351376414312792][315 ms][DEBUG] targetPkg: running [2025-09-06 08:29:27][351376414312792][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 08:29:27][351376414312792][315 ms][DEBUG] START check_boot_completed [2025-09-06 08:29:27][351376414312792][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:29:27][351376414312792][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:29:27][351376414312792][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:29:27][351376414312792][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:29:27][351376414312792][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:29:27][351376414312792][408 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:29:27][351376414312792][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376414312792\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6678\"}'\'' -e'"" [2025-09-06 08:29:27][351376414312792][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:29:27][351376414312792][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376414312792\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6678\"}'\'' -e'"" [2025-09-06 08:29:31][351376414312792][4704 ms][DEBUG] proc_open done in 4296 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 08:29:31][351376414312792][4704 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-09-06 08:29:31][351376414312792][4704 ms][WARN] Detected error: Process with pid 11605 either refused to load frida-agent, or terminated during injectionProcess with pid 11605 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 08:29:31][351376414312792][4704 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 08:29:31][351376414312792][5001 ms][DEBUG] SU: done in 297 ms; outsystem 5389 4972 13434908 593920 ep_poll 0 S system_server\n [2025-09-06 08:29:31][351376414312792][5001 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 08:29:32][351376414312792][5142 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 08:29:32][351376414312792][5142 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 08:29:32][351376414312792][5143 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 08:29:32][351376414312792][5267 ms][DEBUG] SU: done in 124 ms; out [2025-09-06 08:29:32][351376414312792][5267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 08:29:32][351376414312792][5439 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 08:29:34][351376414312792][7453 ms][DEBUG] START check_boot_completed [2025-09-06 08:29:34][351376414312792][7453 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:29:34][351376414312792][7485 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:29:34][351376414312792][7485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:29:34][351376414312792][7532 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:29:34][351376414312792][7532 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:29:37][351376414312792][10546 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 08:29:37][351376414312792][10547 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351376414312792\",\"model\":\"SM-G991N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6678\"}'\'' -e'"" [2025-09-06 08:29:42][351376414312792][15873 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64075749-f4a7-4770-9407-d0001069bfe2","id":"QR_64075749-f4a7-4770-9407-d0001069bfe2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:29:42][351376414312792][16030 ms][DEBUG] proc_open done in 5483 ms; code=255; res.len=3343 [2025-09-06 08:29:42][351376414312792][16030 ms][DEBUG] END runCmdUntilRes#2 in 5483 ms [2025-09-06 08:29:42][351376414312792][16030 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:31:04][350556394161712][1 ms][INFO] === Request start === [2025-09-06 08:31:04][350556394161712][1 ms][DEBUG] START check_scloud [2025-09-06 08:31:04][350556394161712][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:31:04][350556394161712][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 18888 4972 23650640 127420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:31:04][350556394161712][257 ms][DEBUG] targetPkg: running [2025-09-06 08:31:04][350556394161712][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-06 08:31:04][350556394161712][257 ms][DEBUG] START check_boot_completed [2025-09-06 08:31:04][350556394161712][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:31:04][350556394161712][304 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:31:04][350556394161712][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:31:05][350556394161712][366 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:31:05][350556394161712][366 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:31:05][350556394161712][366 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:31:05][350556394161712][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350556394161712\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5514\"}'\'' -e'"" [2025-09-06 08:31:05][350556394161712][367 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:31:05][350556394161712][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350556394161712\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5514\"}'\'' -e'"" [2025-09-06 08:31:10][350556394161712][6162 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17ef1fae-dec3-436e-b69d-4e6d8313835d","id":"QR_17ef1fae-dec3-436e-b69d-4e6d8313835d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:31:10][350556394161712][6318 ms][DEBUG] proc_open done in 5951 ms; code=255; res.len=3343 [2025-09-06 08:31:10][350556394161712][6318 ms][DEBUG] END runCmdUntilRes#1 in 5951 ms [2025-09-06 08:31:10][350556394161712][6318 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:31:14][350556394161712][0 ms][INFO] === Request start === [2025-09-06 08:31:14][350556394161712][1 ms][DEBUG] START check_scloud [2025-09-06 08:31:14][350556394161712][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:31:14][350556394161712][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 18888 4972 23788952 137976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:31:14][350556394161712][250 ms][DEBUG] targetPkg: running [2025-09-06 08:31:14][350556394161712][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-06 08:31:14][350556394161712][250 ms][DEBUG] START check_boot_completed [2025-09-06 08:31:14][350556394161712][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:31:14][350556394161712][296 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:31:14][350556394161712][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:31:14][350556394161712][343 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:31:14][350556394161712][343 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:31:14][350556394161712][343 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:31:14][350556394161712][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350556394161712\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2351\"}'\'' -e'"" [2025-09-06 08:31:14][350556394161712][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:31:14][350556394161712][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350556394161712\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2351\"}'\'' -e'"" [2025-09-06 08:31:18][350556394161712][4077 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6cd3d693-a5cc-4d5f-b6e0-e57707138ec8","id":"QR_6cd3d693-a5cc-4d5f-b6e0-e57707138ec8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:31:18][350556394161712][4233 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-09-06 08:31:18][350556394161712][4233 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-09-06 08:31:18][350556394161712][4233 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:31:21][350545461762130][1 ms][INFO] === Request start === [2025-09-06 08:31:21][350545461762130][1 ms][DEBUG] START check_scloud [2025-09-06 08:31:21][350545461762130][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:31:22][350545461762130][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 18888 4972 23939808 149724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:31:22][350545461762130][292 ms][DEBUG] targetPkg: running [2025-09-06 08:31:22][350545461762130][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 08:31:22][350545461762130][292 ms][DEBUG] START check_boot_completed [2025-09-06 08:31:22][350545461762130][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:31:22][350545461762130][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:31:22][350545461762130][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:31:22][350545461762130][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:31:22][350545461762130][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:31:22][350545461762130][370 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:31:22][350545461762130][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461762130\",\"model\":\"SM-X210\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R92Y30LVF3B\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BRI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5069\"}'\'' -e'"" [2025-09-06 08:31:22][350545461762130][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:31:22][350545461762130][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461762130\",\"model\":\"SM-X210\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R92Y30LVF3B\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BRI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5069\"}'\'' -e'"" [2025-09-06 08:31:25][350545461762130][3854 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa01740d-8424-4a52-afa9-834cfe9c9c7e","id":"QR_fa01740d-8424-4a52-afa9-834cfe9c9c7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:31:25][350545461762130][4010 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-09-06 08:31:25][350545461762130][4010 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-06 08:31:25][350545461762130][4010 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:33:03][352379554037723][0 ms][INFO] === Request start === [2025-09-06 08:33:03][352379554037723][1 ms][DEBUG] START check_scloud [2025-09-06 08:33:03][352379554037723][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:33:03][352379554037723][266 ms][DEBUG] SU: done in 266 ms; outu0_a118 18888 4972 24013552 161228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:33:03][352379554037723][267 ms][DEBUG] targetPkg: running [2025-09-06 08:33:03][352379554037723][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-06 08:33:03][352379554037723][267 ms][DEBUG] START check_boot_completed [2025-09-06 08:33:03][352379554037723][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:33:03][352379554037723][313 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:33:03][352379554037723][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:33:03][352379554037723][376 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:33:03][352379554037723][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:33:03][352379554037723][376 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:33:03][352379554037723][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352379554037723\",\"model\":\"SM-A235N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9969\"}'\'' -e'"" [2025-09-06 08:33:03][352379554037723][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:33:03][352379554037723][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352379554037723\",\"model\":\"SM-A235N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LUO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9969\"}'\'' -e'"" [2025-09-06 08:33:07][352379554037723][4859 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53a8e037-7454-4990-b61c-0a4c9168a71b","id":"QR_53a8e037-7454-4990-b61c-0a4c9168a71b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:33:08][352379554037723][5015 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-09-06 08:33:08][352379554037723][5015 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-09-06 08:33:08][352379554037723][5015 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:33:10][352379554037723][1 ms][INFO] === Request start === [2025-09-06 08:33:10][352379554037723][1 ms][DEBUG] START check_scloud [2025-09-06 08:33:10][352379554037723][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:33:10][352379554037723][282 ms][DEBUG] SU: done in 280 ms; outu0_a118 18888 4972 24136688 173008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:33:10][352379554037723][282 ms][DEBUG] targetPkg: running [2025-09-06 08:33:10][352379554037723][282 ms][DEBUG] END check_scloud in 281 ms [2025-09-06 08:33:10][352379554037723][282 ms][DEBUG] START check_boot_completed [2025-09-06 08:33:10][352379554037723][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:33:10][352379554037723][328 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:33:10][352379554037723][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:33:10][352379554037723][391 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:33:10][352379554037723][391 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:33:10][352379554037723][391 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:33:10][352379554037723][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352379554037723\",\"model\":\"SM-A235N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5449\"}'\'' -e'"" [2025-09-06 08:33:10][352379554037723][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:33:10][352379554037723][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352379554037723\",\"model\":\"SM-A235N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5449\"}'\'' -e'"" [2025-09-06 08:33:16][352379554037723][5686 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1fbcc684-b099-4f5d-bb13-d11a05cfa76b","id":"QR_1fbcc684-b099-4f5d-bb13-d11a05cfa76b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:33:16][352379554037723][5843 ms][DEBUG] proc_open done in 5452 ms; code=255; res.len=3343 [2025-09-06 08:33:16][352379554037723][5843 ms][DEBUG] END runCmdUntilRes#1 in 5452 ms [2025-09-06 08:33:16][352379554037723][5843 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:35:03][356921440601356][0 ms][INFO] === Request start === [2025-09-06 08:35:03][356921440601356][1 ms][DEBUG] START check_scloud [2025-09-06 08:35:03][356921440601356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:35:03][356921440601356][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 18888 4972 24252592 184040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:35:03][356921440601356][299 ms][DEBUG] targetPkg: running [2025-09-06 08:35:03][356921440601356][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 08:35:03][356921440601356][299 ms][DEBUG] START check_boot_completed [2025-09-06 08:35:03][356921440601356][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:35:03][356921440601356][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:35:03][356921440601356][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:35:03][356921440601356][394 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 08:35:03][356921440601356][394 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 08:35:03][356921440601356][394 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:35:03][356921440601356][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356921440601356\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-09-06 08:35:03][356921440601356][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:35:03][356921440601356][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356921440601356\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-09-06 08:35:08][356921440601356][5141 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c0b0207-2541-4f11-ace5-682e7fa87fdc","id":"QR_0c0b0207-2541-4f11-ace5-682e7fa87fdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:35:08][356921440601356][5298 ms][DEBUG] proc_open done in 4903 ms; code=255; res.len=3343 [2025-09-06 08:35:08][356921440601356][5298 ms][DEBUG] END runCmdUntilRes#1 in 4903 ms [2025-09-06 08:35:08][356921440601356][5298 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:35:11][356921440601356][1 ms][INFO] === Request start === [2025-09-06 08:35:11][356921440601356][1 ms][DEBUG] START check_scloud [2025-09-06 08:35:11][356921440601356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:35:11][356921440601356][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 18888 4972 24384824 195768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:35:11][356921440601356][295 ms][DEBUG] targetPkg: running [2025-09-06 08:35:11][356921440601356][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 08:35:11][356921440601356][295 ms][DEBUG] START check_boot_completed [2025-09-06 08:35:11][356921440601356][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:35:11][356921440601356][342 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:35:11][356921440601356][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:35:11][356921440601356][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:35:11][356921440601356][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:35:11][356921440601356][389 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:35:11][356921440601356][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356921440601356\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5707\"}'\'' -e'"" [2025-09-06 08:35:11][356921440601356][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:35:11][356921440601356][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356921440601356\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5707\"}'\'' -e'"" [2025-09-06 08:35:16][356921440601356][5591 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_360508dd-a5ba-4fe7-b6c3-0e9d9e2c3340","id":"QR_360508dd-a5ba-4fe7-b6c3-0e9d9e2c3340","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:35:16][356921440601356][5747 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-09-06 08:35:16][356921440601356][5747 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-09-06 08:35:16][356921440601356][5747 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:36:03][357962507132629][0 ms][INFO] === Request start === [2025-09-06 08:36:03][357962507132629][1 ms][DEBUG] START check_scloud [2025-09-06 08:36:03][357962507132629][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:36:03][357962507132629][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 18888 4972 24500728 207108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:36:03][357962507132629][265 ms][DEBUG] targetPkg: running [2025-09-06 08:36:03][357962507132629][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-06 08:36:03][357962507132629][265 ms][DEBUG] START check_boot_completed [2025-09-06 08:36:03][357962507132629][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:36:03][357962507132629][311 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:36:03][357962507132629][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:36:03][357962507132629][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:36:03][357962507132629][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:36:03][357962507132629][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:36:03][357962507132629][483 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1619\nsuccessfulTxPacketsPerSecond: 0.8799017166384434\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.20918418169140351\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1598\nsuccessfulRxPacketsPerSecond: 0.7636882823654414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:36:03][357962507132629][484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:36:05][357962507132629][1920 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=405 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 405.347/405.347/405.347/0.000 ms\n [2025-09-06 08:36:05][357962507132629][1921 ms][DEBUG] check_internet: online [2025-09-06 08:36:05][357962507132629][1921 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:36:05][357962507132629][1921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507132629\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5110\"}'\'' -e'"" [2025-09-06 08:36:05][357962507132629][1921 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:36:05][357962507132629][1921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507132629\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5110\"}'\'' -e'"" [2025-09-06 08:36:09][357962507132629][5982 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb4ee7ac-3c20-43f3-93b2-e105a80fde25","id":"QR_fb4ee7ac-3c20-43f3-93b2-e105a80fde25","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:36:09][357962507132629][6138 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-09-06 08:36:09][357962507132629][6138 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-09-06 08:36:09][357962507132629][6138 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:36:13][357962507132629][0 ms][INFO] === Request start === [2025-09-06 08:36:13][357962507132629][1 ms][DEBUG] START check_scloud [2025-09-06 08:36:13][357962507132629][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:36:14][357962507132629][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18888 4972 24642176 217876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:36:14][357962507132629][307 ms][DEBUG] targetPkg: running [2025-09-06 08:36:14][357962507132629][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 08:36:14][357962507132629][307 ms][DEBUG] START check_boot_completed [2025-09-06 08:36:14][357962507132629][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:36:14][357962507132629][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:36:14][357962507132629][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:36:14][357962507132629][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:36:14][357962507132629][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:36:14][357962507132629][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:36:14][357962507132629][541 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1619\nsuccessfulTxPacketsPerSecond: 0.8799017166384434\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.20918418169140351\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1598\nsuccessfulRxPacketsPerSecond: 0.7636882823654414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:36:14][357962507132629][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:36:14][357962507132629][963 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=311 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 311.189/311.189/311.189/0.000 ms\n [2025-09-06 08:36:14][357962507132629][963 ms][DEBUG] check_internet: online [2025-09-06 08:36:14][357962507132629][963 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:36:14][357962507132629][963 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507132629\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7726\"}'\'' -e'"" [2025-09-06 08:36:14][357962507132629][963 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:36:14][357962507132629][963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507132629\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7726\"}'\'' -e'"" [2025-09-06 08:36:20][357962507132629][6196 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c12c73f-e533-4d07-934f-641dce3c1eda","id":"QR_3c12c73f-e533-4d07-934f-641dce3c1eda","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:36:20][357962507132629][6352 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-06 08:36:20][357962507132629][6353 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-06 08:36:20][357962507132629][6353 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:36:29][353310804272561][0 ms][INFO] === Request start === [2025-09-06 08:36:29][353310804272561][1 ms][DEBUG] START check_scloud [2025-09-06 08:36:29][353310804272561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:36:29][353310804272561][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 18888 4972 24747748 229624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:36:29][353310804272561][302 ms][DEBUG] targetPkg: running [2025-09-06 08:36:29][353310804272561][302 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 08:36:29][353310804272561][303 ms][DEBUG] START check_boot_completed [2025-09-06 08:36:29][353310804272561][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:36:29][353310804272561][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:36:29][353310804272561][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:36:30][353310804272561][412 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:36:30][353310804272561][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:36:30][353310804272561][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:36:30][353310804272561][552 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1619\nsuccessfulTxPacketsPerSecond: 0.8799017166384434\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.20918418169140351\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1598\nsuccessfulRxPacketsPerSecond: 0.7636882823654414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:36:30][353310804272561][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:36:30][353310804272561][880 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.431/228.431/228.431/0.000 ms\n [2025-09-06 08:36:30][353310804272561][880 ms][DEBUG] check_internet: online [2025-09-06 08:36:30][353310804272561][881 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:36:30][353310804272561][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804272561\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9305\"}'\'' -e'"" [2025-09-06 08:36:30][353310804272561][881 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:36:30][353310804272561][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804272561\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9305\"}'\'' -e'"" [2025-09-06 08:36:33][353310804272561][4364 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a12ee6b9-8cc2-487b-b305-6f7c448e829c","id":"QR_a12ee6b9-8cc2-487b-b305-6f7c448e829c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:36:34][353310804272561][4520 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-06 08:36:34][353310804272561][4520 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-06 08:36:34][353310804272561][4520 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:36:52][353310804272561][0 ms][INFO] === Request start === [2025-09-06 08:36:52][353310804272561][1 ms][DEBUG] START check_scloud [2025-09-06 08:36:52][353310804272561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:36:52][353310804272561][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 18888 4972 24867620 240964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:36:52][353310804272561][311 ms][DEBUG] targetPkg: running [2025-09-06 08:36:52][353310804272561][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 08:36:52][353310804272561][311 ms][DEBUG] START check_boot_completed [2025-09-06 08:36:52][353310804272561][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:36:52][353310804272561][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:36:52][353310804272561][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:36:53][353310804272561][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:36:53][353310804272561][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:36:53][353310804272561][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:36:53][353310804272561][498 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1619\nsuccessfulTxPacketsPerSecond: 0.8799017166384434\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.20918418169140351\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1598\nsuccessfulRxPacketsPerSecond: 0.7636882823654414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:36:53][353310804272561][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:36:53][353310804272561][920 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=323 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 323.921/323.921/323.921/0.000 ms\n [2025-09-06 08:36:53][353310804272561][920 ms][DEBUG] check_internet: online [2025-09-06 08:36:53][353310804272561][920 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:36:53][353310804272561][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804272561\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1024\"}'\'' -e'"" [2025-09-06 08:36:53][353310804272561][920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:36:53][353310804272561][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804272561\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1024\"}'\'' -e'"" [2025-09-06 08:36:57][353310804272561][4935 ms][DEBUG] proc_open done in 4014 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 08:36:57][353310804272561][4935 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-09-06 08:36:57][353310804272561][4935 ms][WARN] Detected error: Process with pid 18888 either refused to load frida-agent, or terminated during injectionProcess with pid 18888 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 08:36:57][353310804272561][4935 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 08:36:57][353310804272561][5216 ms][DEBUG] SU: done in 281 ms; outsystem 5389 4972 13073688 255436 ep_poll 0 S system_server\n [2025-09-06 08:36:57][353310804272561][5216 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 08:36:57][353310804272561][5357 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 08:36:57][353310804272561][5357 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 08:36:57][353310804272561][5357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 08:36:58][353310804272561][5497 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 08:36:58][353310804272561][5497 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 08:36:58][353310804272561][5731 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 08:37:00][353310804272561][7746 ms][DEBUG] START check_boot_completed [2025-09-06 08:37:00][353310804272561][7747 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:37:00][353310804272561][7794 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:37:00][353310804272561][7794 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:37:00][353310804272561][7856 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:37:00][353310804272561][7856 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 08:37:03][353310804272561][10871 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 08:37:03][353310804272561][10871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804272561\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1024\"}'\'' -e'"" [2025-09-06 08:37:08][353310804272561][16041 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9eecc68-ee67-445f-8e71-ad912d588dd2","id":"QR_b9eecc68-ee67-445f-8e71-ad912d588dd2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:37:08][353310804272561][16198 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-06 08:37:08][353310804272561][16198 ms][DEBUG] END runCmdUntilRes#2 in 5327 ms [2025-09-06 08:37:08][353310804272561][16198 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:38:03][354321592198388][1 ms][INFO] === Request start === [2025-09-06 08:38:03][354321592198388][1 ms][DEBUG] START check_scloud [2025-09-06 08:38:03][354321592198388][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:38:03][354321592198388][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 20352 4972 23644440 127296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:38:03][354321592198388][317 ms][DEBUG] targetPkg: running [2025-09-06 08:38:03][354321592198388][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 08:38:03][354321592198388][317 ms][DEBUG] START check_boot_completed [2025-09-06 08:38:03][354321592198388][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:38:03][354321592198388][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:38:03][354321592198388][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:38:03][354321592198388][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:38:03][354321592198388][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:38:03][354321592198388][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:38:04][354321592198388][535 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1619\nsuccessfulTxPacketsPerSecond: 0.8799017166384434\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.20918418169140351\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1598\nsuccessfulRxPacketsPerSecond: 0.7636882823654414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:38:04][354321592198388][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:38:04][354321592198388][957 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=325 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 325.543/325.543/325.543/0.000 ms\n [2025-09-06 08:38:04][354321592198388][957 ms][DEBUG] check_internet: online [2025-09-06 08:38:04][354321592198388][957 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:38:04][354321592198388][957 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321592198388\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4042\"}'\'' -e'"" [2025-09-06 08:38:04][354321592198388][957 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:38:04][354321592198388][957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321592198388\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4042\"}'\'' -e'"" [2025-09-06 08:38:09][354321592198388][5565 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8330dd6b-fb3a-44a6-b40e-9e37d448a5e6","id":"QR_8330dd6b-fb3a-44a6-b40e-9e37d448a5e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:38:09][354321592198388][5721 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-06 08:38:09][354321592198388][5721 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-06 08:38:09][354321592198388][5721 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:38:11][354321592198388][1 ms][INFO] === Request start === [2025-09-06 08:38:11][354321592198388][1 ms][DEBUG] START check_scloud [2025-09-06 08:38:11][354321592198388][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:38:11][354321592198388][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 20352 4972 23788896 138004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:38:11][354321592198388][272 ms][DEBUG] targetPkg: running [2025-09-06 08:38:11][354321592198388][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-06 08:38:11][354321592198388][272 ms][DEBUG] START check_boot_completed [2025-09-06 08:38:11][354321592198388][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:38:11][354321592198388][302 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:38:11][354321592198388][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:38:11][354321592198388][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:38:11][354321592198388][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:38:11][354321592198388][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:38:12][354321592198388][459 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1619\nsuccessfulTxPacketsPerSecond: 0.8799017166384434\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.20918418169140351\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1598\nsuccessfulRxPacketsPerSecond: 0.7636882823654414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:38:12][354321592198388][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:38:12][354321592198388][787 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.691/228.691/228.691/0.000 ms\n [2025-09-06 08:38:12][354321592198388][787 ms][DEBUG] check_internet: online [2025-09-06 08:38:12][354321592198388][787 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:38:12][354321592198388][787 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321592198388\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7245\"}'\'' -e'"" [2025-09-06 08:38:12][354321592198388][788 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:38:12][354321592198388][788 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321592198388\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7245\"}'\'' -e'"" [2025-09-06 08:38:17][354321592198388][5926 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64141838-82d6-48fc-825c-94fdebcab5ad","id":"QR_64141838-82d6-48fc-825c-94fdebcab5ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:38:17][354321592198388][6082 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-06 08:38:17][354321592198388][6082 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-06 08:38:17][354321592198388][6082 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:40:03][350347645882094][0 ms][INFO] === Request start === [2025-09-06 08:40:03][350347645882094][1 ms][DEBUG] START check_scloud [2025-09-06 08:40:03][350347645882094][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:40:04][350347645882094][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 20352 4972 23907860 150476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:40:04][350347645882094][252 ms][DEBUG] targetPkg: running [2025-09-06 08:40:04][350347645882094][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-06 08:40:04][350347645882094][252 ms][DEBUG] START check_boot_completed [2025-09-06 08:40:04][350347645882094][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:40:04][350347645882094][299 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:40:04][350347645882094][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:40:04][350347645882094][361 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:40:04][350347645882094][361 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:40:04][350347645882094][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:40:04][350347645882094][470 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1619\nsuccessfulTxPacketsPerSecond: 0.8799017166384434\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.20918418169140351\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1598\nsuccessfulRxPacketsPerSecond: 0.7636882823654414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:40:04][350347645882094][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:40:04][350347645882094][861 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.140/292.140/292.140/0.000 ms\n [2025-09-06 08:40:04][350347645882094][861 ms][DEBUG] check_internet: online [2025-09-06 08:40:04][350347645882094][861 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:40:04][350347645882094][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350347645882094\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3754\"}'\'' -e'"" [2025-09-06 08:40:04][350347645882094][861 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:40:04][350347645882094][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350347645882094\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3754\"}'\'' -e'"" [2025-09-06 08:40:09][350347645882094][5500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07979225-ccbf-4253-a0e3-b6cb8d77b900","id":"QR_07979225-ccbf-4253-a0e3-b6cb8d77b900","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:40:09][350347645882094][5656 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-06 08:40:09][350347645882094][5656 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-06 08:40:09][350347645882094][5657 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:40:11][350347645882094][1 ms][INFO] === Request start === [2025-09-06 08:40:11][350347645882094][1 ms][DEBUG] START check_scloud [2025-09-06 08:40:11][350347645882094][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:40:12][350347645882094][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 20352 4972 24042140 161352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:40:12][350347645882094][303 ms][DEBUG] targetPkg: running [2025-09-06 08:40:12][350347645882094][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 08:40:12][350347645882094][303 ms][DEBUG] START check_boot_completed [2025-09-06 08:40:12][350347645882094][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:40:12][350347645882094][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:40:12][350347645882094][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:40:12][350347645882094][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:40:12][350347645882094][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:40:12][350347645882094][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:40:12][350347645882094][475 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1619\nsuccessfulTxPacketsPerSecond: 0.8799017166384434\nretriedTxPackets: 250\nretriedTxPacketsPerSecond: 0.20918418169140351\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1598\nsuccessfulRxPacketsPerSecond: 0.7636882823654414\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:40:12][350347645882094][475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:40:12][350347645882094][834 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.723/272.723/272.723/0.000 ms\n [2025-09-06 08:40:12][350347645882094][835 ms][DEBUG] check_internet: online [2025-09-06 08:40:12][350347645882094][835 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:40:12][350347645882094][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350347645882094\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4484\"}'\'' -e'"" [2025-09-06 08:40:12][350347645882094][835 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:40:12][350347645882094][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350347645882094\",\"model\":\"SM-A356B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4484\"}'\'' -e'"" [2025-09-06 08:40:18][350347645882094][6208 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8606207-6e48-4774-a302-ac6cc9ec8ff6","id":"QR_f8606207-6e48-4774-a302-ac6cc9ec8ff6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:40:18][350347645882094][6364 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-06 08:40:18][350347645882094][6364 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-06 08:40:18][350347645882094][6365 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:42:03][354068191550457][0 ms][INFO] === Request start === [2025-09-06 08:42:03][354068191550457][1 ms][DEBUG] START check_scloud [2025-09-06 08:42:03][354068191550457][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:42:03][354068191550457][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 20352 4972 24182492 172524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:42:03][354068191550457][299 ms][DEBUG] targetPkg: running [2025-09-06 08:42:03][354068191550457][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 08:42:03][354068191550457][299 ms][DEBUG] START check_boot_completed [2025-09-06 08:42:03][354068191550457][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:42:03][354068191550457][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:42:03][354068191550457][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:42:03][354068191550457][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:42:03][354068191550457][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:42:03][354068191550457][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:42:04][354068191550457][487 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1876\nsuccessfulTxPacketsPerSecond: 0.853454831650223\nretriedTxPackets: 317\nretriedTxPacketsPerSecond: 0.2224960066948052\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1824\nsuccessfulRxPacketsPerSecond: 0.7505089181048653\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:42:04][354068191550457][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:42:05][354068191550457][1908 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.894/300.894/300.894/0.000 ms\n [2025-09-06 08:42:05][354068191550457][1908 ms][DEBUG] check_internet: online [2025-09-06 08:42:05][354068191550457][1908 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:42:05][354068191550457][1908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191550457\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9024\"}'\'' -e'"" [2025-09-06 08:42:05][354068191550457][1908 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:42:05][354068191550457][1908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191550457\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9024\"}'\'' -e'"" [2025-09-06 08:42:09][354068191550457][6454 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc7a58c0-6e12-41f6-a2ea-16cd8eb78e3c","id":"QR_cc7a58c0-6e12-41f6-a2ea-16cd8eb78e3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:42:10][354068191550457][6610 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-06 08:42:10][354068191550457][6610 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-06 08:42:10][354068191550457][6610 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:42:12][354068191550457][1 ms][INFO] === Request start === [2025-09-06 08:42:12][354068191550457][1 ms][DEBUG] START check_scloud [2025-09-06 08:42:12][354068191550457][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:42:12][354068191550457][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 20352 4972 24310500 184144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:42:12][354068191550457][288 ms][DEBUG] targetPkg: running [2025-09-06 08:42:12][354068191550457][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-06 08:42:12][354068191550457][288 ms][DEBUG] START check_boot_completed [2025-09-06 08:42:12][354068191550457][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:42:12][354068191550457][318 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 08:42:12][354068191550457][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:42:12][354068191550457][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:42:12][354068191550457][365 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 08:42:12][354068191550457][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:42:13][354068191550457][474 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1876\nsuccessfulTxPacketsPerSecond: 0.853454831650223\nretriedTxPackets: 317\nretriedTxPacketsPerSecond: 0.2224960066948052\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1824\nsuccessfulRxPacketsPerSecond: 0.7505089181048653\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:42:13][354068191550457][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:42:13][354068191550457][849 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=276 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 276.727/276.727/276.727/0.000 ms\n [2025-09-06 08:42:13][354068191550457][849 ms][DEBUG] check_internet: online [2025-09-06 08:42:13][354068191550457][850 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:42:13][354068191550457][850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191550457\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6798\"}'\'' -e'"" [2025-09-06 08:42:13][354068191550457][850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:42:13][354068191550457][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191550457\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6798\"}'\'' -e'"" [2025-09-06 08:42:18][354068191550457][6004 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80387f42-15b5-49cd-adf7-9e138bbd08e0","id":"QR_80387f42-15b5-49cd-adf7-9e138bbd08e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:42:18][354068191550457][6160 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 08:42:18][354068191550457][6160 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 08:42:18][354068191550457][6161 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:44:03][352674520152550][0 ms][INFO] === Request start === [2025-09-06 08:44:03][352674520152550][1 ms][DEBUG] START check_scloud [2025-09-06 08:44:03][352674520152550][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:44:04][352674520152550][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 20352 4972 24436644 194924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:44:04][352674520152550][270 ms][DEBUG] targetPkg: running [2025-09-06 08:44:04][352674520152550][270 ms][DEBUG] END check_scloud in 270 ms [2025-09-06 08:44:04][352674520152550][270 ms][DEBUG] START check_boot_completed [2025-09-06 08:44:04][352674520152550][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:44:04][352674520152550][317 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:44:04][352674520152550][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:44:04][352674520152550][379 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:44:04][352674520152550][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:44:04][352674520152550][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:44:04][352674520152550][504 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1958\nsuccessfulTxPacketsPerSecond: 0.6287427445387559\nretriedTxPackets: 339\nretriedTxPacketsPerSecond: 0.16868707780308084\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1894\nsuccessfulRxPacketsPerSecond: 0.5367316111916208\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:44:04][352674520152550][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:44:04][352674520152550][895 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=278 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 278.911/278.911/278.911/0.000 ms\n [2025-09-06 08:44:04][352674520152550][895 ms][DEBUG] check_internet: online [2025-09-06 08:44:04][352674520152550][895 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:44:04][352674520152550][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520152550\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5268\"}'\'' -e'"" [2025-09-06 08:44:04][352674520152550][895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:44:04][352674520152550][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520152550\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5268\"}'\'' -e'"" [2025-09-06 08:44:09][352674520152550][5628 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c46927d-f39b-4e88-a699-7c683f50e3ea","id":"QR_0c46927d-f39b-4e88-a699-7c683f50e3ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:44:09][352674520152550][5784 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 08:44:09][352674520152550][5784 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 08:44:09][352674520152550][5784 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:44:11][352674520152550][0 ms][INFO] === Request start === [2025-09-06 08:44:11][352674520152550][1 ms][DEBUG] START check_scloud [2025-09-06 08:44:11][352674520152550][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:44:12][352674520152550][254 ms][DEBUG] SU: done in 254 ms; outu0_a118 20352 4972 24560684 206616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:44:12][352674520152550][254 ms][DEBUG] targetPkg: running [2025-09-06 08:44:12][352674520152550][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-06 08:44:12][352674520152550][255 ms][DEBUG] START check_boot_completed [2025-09-06 08:44:12][352674520152550][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:44:12][352674520152550][301 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:44:12][352674520152550][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:44:12][352674520152550][364 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 08:44:12][352674520152550][364 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 08:44:12][352674520152550][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:44:12][352674520152550][504 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1958\nsuccessfulTxPacketsPerSecond: 0.6287427445387559\nretriedTxPackets: 339\nretriedTxPacketsPerSecond: 0.16868707780308084\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1894\nsuccessfulRxPacketsPerSecond: 0.5367316111916208\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:44:12][352674520152550][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:44:12][352674520152550][879 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=287 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 287.683/287.683/287.683/0.000 ms\n [2025-09-06 08:44:12][352674520152550][879 ms][DEBUG] check_internet: online [2025-09-06 08:44:12][352674520152550][880 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:44:12][352674520152550][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520152550\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1700\"}'\'' -e'"" [2025-09-06 08:44:12][352674520152550][880 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:44:12][352674520152550][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520152550\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1700\"}'\'' -e'"" [2025-09-06 08:44:18][352674520152550][6143 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_87496fdf-ed43-4028-b47a-a11c404ca3fd","id":"QR_87496fdf-ed43-4028-b47a-a11c404ca3fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:44:18][352674520152550][6300 ms][DEBUG] proc_open done in 5419 ms; code=255; res.len=3343 [2025-09-06 08:44:18][352674520152550][6300 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-06 08:44:18][352674520152550][6300 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:47:03][357822610233484][1 ms][INFO] === Request start === [2025-09-06 08:47:03][357822610233484][1 ms][DEBUG] START check_scloud [2025-09-06 08:47:03][357822610233484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:47:03][357822610233484][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 20352 4972 24707180 217388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:47:03][357822610233484][330 ms][DEBUG] targetPkg: running [2025-09-06 08:47:03][357822610233484][331 ms][DEBUG] END check_scloud in 329 ms [2025-09-06 08:47:03][357822610233484][331 ms][DEBUG] START check_boot_completed [2025-09-06 08:47:03][357822610233484][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:47:03][357822610233484][361 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:47:03][357822610233484][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:47:03][357822610233484][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:47:03][357822610233484][408 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:47:03][357822610233484][408 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:47:03][357822610233484][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822610233484\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3223\"}'\'' -e'"" [2025-09-06 08:47:03][357822610233484][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:47:03][357822610233484][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822610233484\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3223\"}'\'' -e'"" [2025-09-06 08:47:08][357822610233484][5266 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c2ca507-e08b-4c93-a856-86feb31d8f60","id":"QR_5c2ca507-e08b-4c93-a856-86feb31d8f60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:47:08][357822610233484][5423 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 08:47:08][357822610233484][5423 ms][DEBUG] END runCmdUntilRes#1 in 5015 ms [2025-09-06 08:47:08][357822610233484][5423 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:47:10][357822610233484][0 ms][INFO] === Request start === [2025-09-06 08:47:10][357822610233484][1 ms][DEBUG] START check_scloud [2025-09-06 08:47:10][357822610233484][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:47:11][357822610233484][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 20352 4972 24847732 229240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:47:11][357822610233484][280 ms][DEBUG] targetPkg: running [2025-09-06 08:47:11][357822610233484][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-06 08:47:11][357822610233484][280 ms][DEBUG] START check_boot_completed [2025-09-06 08:47:11][357822610233484][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:47:11][357822610233484][326 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:47:11][357822610233484][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:47:11][357822610233484][404 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 08:47:11][357822610233484][405 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 08:47:11][357822610233484][405 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:47:11][357822610233484][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822610233484\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6245\"}'\'' -e'"" [2025-09-06 08:47:11][357822610233484][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:47:11][357822610233484][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822610233484\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6245\"}'\'' -e'"" [2025-09-06 08:47:16][357822610233484][5747 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78194a6e-eda3-4855-b261-eb9aafeec402","id":"QR_78194a6e-eda3-4855-b261-eb9aafeec402","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:47:16][357822610233484][5903 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-06 08:47:16][357822610233484][5903 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-09-06 08:47:16][357822610233484][5903 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:48:03][351877474141070][0 ms][INFO] === Request start === [2025-09-06 08:48:03][351877474141070][1 ms][DEBUG] START check_scloud [2025-09-06 08:48:03][351877474141070][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:48:03][351877474141070][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 20352 4972 24934964 240348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:48:03][351877474141070][290 ms][DEBUG] targetPkg: running [2025-09-06 08:48:03][351877474141070][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-06 08:48:03][351877474141070][290 ms][DEBUG] START check_boot_completed [2025-09-06 08:48:03][351877474141070][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:48:03][351877474141070][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:48:03][351877474141070][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:48:03][351877474141070][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:48:03][351877474141070][383 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 08:48:03][351877474141070][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:48:03][351877474141070][492 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2240\nsuccessfulTxPacketsPerSecond: 0.9362238969489725\nretriedTxPackets: 403\nretriedTxPacketsPerSecond: 0.212476345406859\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2133\nsuccessfulRxPacketsPerSecond: 0.7934663523787391\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:48:03][351877474141070][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:48:05][351877474141070][1898 ms][DEBUG] SU: done in 1405 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.867/298.867/298.867/0.000 ms\n [2025-09-06 08:48:05][351877474141070][1898 ms][DEBUG] check_internet: online [2025-09-06 08:48:05][351877474141070][1898 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:48:05][351877474141070][1898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474141070\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2799\"}'\'' -e'"" [2025-09-06 08:48:05][351877474141070][1898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:48:05][351877474141070][1898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474141070\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2799\"}'\'' -e'"" [2025-09-06 08:48:09][351877474141070][5772 ms][DEBUG] proc_open done in 3874 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 08:48:09][351877474141070][5772 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-06 08:48:09][351877474141070][5773 ms][WARN] Detected error: Process with pid 20352 either refused to load frida-agent, or terminated during injectionProcess with pid 20352 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 08:48:09][351877474141070][5773 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 08:48:09][351877474141070][6038 ms][DEBUG] SU: done in 265 ms; outsystem 5389 4972 12867332 248628 ep_poll 0 S system_server\n [2025-09-06 08:48:09][351877474141070][6038 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 08:48:09][351877474141070][6178 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 08:48:09][351877474141070][6178 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 08:48:09][351877474141070][6178 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 08:48:09][351877474141070][6319 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 08:48:09][351877474141070][6319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 08:48:09][351877474141070][6506 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 08:48:11][351877474141070][8521 ms][DEBUG] START check_boot_completed [2025-09-06 08:48:11][351877474141070][8521 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:48:11][351877474141070][8568 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 08:48:11][351877474141070][8568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:48:11][351877474141070][8615 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:48:11][351877474141070][8615 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 08:48:14][351877474141070][11630 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 08:48:14][351877474141070][11630 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474141070\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2799\"}'\'' -e'"" [2025-09-06 08:48:18][351877474141070][15254 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_faed481b-1134-4312-816a-46007020e8f1","id":"QR_faed481b-1134-4312-816a-46007020e8f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:48:18][351877474141070][15410 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-09-06 08:48:18][351877474141070][15410 ms][DEBUG] END runCmdUntilRes#2 in 3780 ms [2025-09-06 08:48:18][351877474141070][15410 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:48:21][351877474141070][0 ms][INFO] === Request start === [2025-09-06 08:48:21][351877474141070][1 ms][DEBUG] START check_scloud [2025-09-06 08:48:21][351877474141070][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:48:21][351877474141070][246 ms][DEBUG] SU: done in 246 ms; outu0_a118 22018 4972 23679556 125376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:48:21][351877474141070][246 ms][DEBUG] targetPkg: running [2025-09-06 08:48:21][351877474141070][246 ms][DEBUG] END check_scloud in 246 ms [2025-09-06 08:48:21][351877474141070][247 ms][DEBUG] START check_boot_completed [2025-09-06 08:48:21][351877474141070][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:48:21][351877474141070][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:48:21][351877474141070][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:48:21][351877474141070][341 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 08:48:21][351877474141070][341 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 08:48:21][351877474141070][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 08:48:21][351877474141070][465 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2240\nsuccessfulTxPacketsPerSecond: 0.9362238969489725\nretriedTxPackets: 403\nretriedTxPacketsPerSecond: 0.212476345406859\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2133\nsuccessfulRxPacketsPerSecond: 0.7934663523787391\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 08:48:21][351877474141070][465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 08:48:21][351877474141070][840 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.303/253.303/253.303/0.000 ms\n [2025-09-06 08:48:21][351877474141070][840 ms][DEBUG] check_internet: online [2025-09-06 08:48:21][351877474141070][840 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:48:21][351877474141070][840 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474141070\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8463\"}'\'' -e'"" [2025-09-06 08:48:21][351877474141070][840 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:48:21][351877474141070][840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877474141070\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8463\"}'\'' -e'"" [2025-09-06 08:48:26][351877474141070][5854 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67214639-5134-4156-becb-c631a836780c","id":"QR_67214639-5134-4156-becb-c631a836780c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:48:27][351877474141070][6010 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-09-06 08:48:27][351877474141070][6011 ms][DEBUG] END runCmdUntilRes#1 in 5171 ms [2025-09-06 08:48:27][351877474141070][6011 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:55:03][354896110485375][1 ms][INFO] === Request start === [2025-09-06 08:55:03][354896110485375][1 ms][DEBUG] START check_scloud [2025-09-06 08:55:03][354896110485375][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:55:03][354896110485375][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 22018 4972 23718336 138620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:55:03][354896110485375][288 ms][DEBUG] targetPkg: running [2025-09-06 08:55:03][354896110485375][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-06 08:55:03][354896110485375][288 ms][DEBUG] START check_boot_completed [2025-09-06 08:55:03][354896110485375][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:55:03][354896110485375][319 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 08:55:03][354896110485375][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:55:03][354896110485375][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 08:55:03][354896110485375][366 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 08:55:03][354896110485375][366 ms][DEBUG] rawBody.length=1150 [2025-09-06 08:55:03][354896110485375][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354896110485375\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TSE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7243\"}'\'' -e'"" [2025-09-06 08:55:03][354896110485375][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:55:03][354896110485375][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354896110485375\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TSE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7243\"}'\'' -e'"" [2025-09-06 08:55:08][354896110485375][5068 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ef8b3231-1ff7-4616-a11e-01fa7e2d22bc","id":"QR_ef8b3231-1ff7-4616-a11e-01fa7e2d22bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:55:08][354896110485375][5224 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-06 08:55:08][354896110485375][5224 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-06 08:55:08][354896110485375][5224 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 08:55:10][354896110485375][0 ms][INFO] === Request start === [2025-09-06 08:55:10][354896110485375][1 ms][DEBUG] START check_scloud [2025-09-06 08:55:10][354896110485375][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 08:55:11][354896110485375][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 22018 4972 23915028 150528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 08:55:11][354896110485375][288 ms][DEBUG] targetPkg: running [2025-09-06 08:55:11][354896110485375][288 ms][DEBUG] END check_scloud in 288 ms [2025-09-06 08:55:11][354896110485375][288 ms][DEBUG] START check_boot_completed [2025-09-06 08:55:11][354896110485375][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 08:55:11][354896110485375][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 08:55:11][354896110485375][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 08:55:11][354896110485375][413 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 08:55:11][354896110485375][413 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 08:55:11][354896110485375][413 ms][DEBUG] rawBody.length=1160 [2025-09-06 08:55:11][354896110485375][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354896110485375\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TSE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3180\"}'\'' -e'"" [2025-09-06 08:55:11][354896110485375][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 08:55:11][354896110485375][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354896110485375\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TSE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3180\"}'\'' -e'"" [2025-09-06 08:55:16][354896110485375][5646 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85917ec1-f04a-4cd6-869d-67aa8bf401bf","id":"QR_85917ec1-f04a-4cd6-869d-67aa8bf401bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 08:55:16][354896110485375][5802 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-06 08:55:16][354896110485375][5802 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-06 08:55:16][354896110485375][5802 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:00:05][350239331336313][1 ms][INFO] === Request start === [2025-09-06 09:00:05][350239331336313][1 ms][DEBUG] START check_scloud [2025-09-06 09:00:05][350239331336313][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:00:05][350239331336313][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 22018 4972 24018580 161592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:00:05][350239331336313][299 ms][DEBUG] targetPkg: running [2025-09-06 09:00:05][350239331336313][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 09:00:05][350239331336313][299 ms][DEBUG] START check_boot_completed [2025-09-06 09:00:05][350239331336313][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:00:05][350239331336313][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:00:05][350239331336313][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:00:05][350239331336313][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:00:05][350239331336313][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 09:00:05][350239331336313][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:00:05][350239331336313][502 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2450\nsuccessfulTxPacketsPerSecond: 0.30221305363296225\nretriedTxPackets: 454\nretriedTxPacketsPerSecond: 0.06898341441621965\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2323\nsuccessfulRxPacketsPerSecond: 0.28578843115290997\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:00:05][350239331336313][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:00:07][350239331336313][1908 ms][DEBUG] SU: done in 1405 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.071/293.071/293.071/0.000 ms\n [2025-09-06 09:00:07][350239331336313][1908 ms][DEBUG] check_internet: online [2025-09-06 09:00:07][350239331336313][1908 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:00:07][350239331336313][1908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350239331336313\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52TB070W3Y\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ITV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7491\"}'\'' -e'"" [2025-09-06 09:00:07][350239331336313][1909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:00:07][350239331336313][1909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350239331336313\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52TB070W3Y\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ITV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7491\"}'\'' -e'"" [2025-09-06 09:00:11][350239331336313][5860 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8de2df05-6dca-4bb0-b1c3-92c11905474e","id":"QR_8de2df05-6dca-4bb0-b1c3-92c11905474e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:00:11][350239331336313][6016 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-06 09:00:11][350239331336313][6016 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-06 09:00:11][350239331336313][6016 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:01:03][351786693560657][0 ms][INFO] === Request start === [2025-09-06 09:01:03][351786693560657][1 ms][DEBUG] START check_scloud [2025-09-06 09:01:03][351786693560657][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:01:04][351786693560657][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 22018 4972 24155000 172364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:01:04][351786693560657][307 ms][DEBUG] targetPkg: running [2025-09-06 09:01:04][351786693560657][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 09:01:04][351786693560657][307 ms][DEBUG] START check_boot_completed [2025-09-06 09:01:04][351786693560657][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:01:04][351786693560657][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:01:04][351786693560657][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:01:04][351786693560657][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 09:01:04][351786693560657][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:01:04][351786693560657][416 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:01:04][351786693560657][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693560657\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6522\"}'\'' -e'"" [2025-09-06 09:01:04][351786693560657][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:01:04][351786693560657][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693560657\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6522\"}'\'' -e'"" [2025-09-06 09:01:07][351786693560657][3946 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7e3feb7-4b54-4135-9b6b-3292efb3fe5b","id":"QR_c7e3feb7-4b54-4135-9b6b-3292efb3fe5b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:01:07][351786693560657][4102 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-09-06 09:01:07][351786693560657][4103 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-06 09:01:07][351786693560657][4103 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:01:10][351786693560657][0 ms][INFO] === Request start === [2025-09-06 09:01:10][351786693560657][1 ms][DEBUG] START check_scloud [2025-09-06 09:01:10][351786693560657][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:01:10][351786693560657][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 22018 4972 24309696 184140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:01:10][351786693560657][310 ms][DEBUG] targetPkg: running [2025-09-06 09:01:10][351786693560657][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 09:01:10][351786693560657][310 ms][DEBUG] START check_boot_completed [2025-09-06 09:01:10][351786693560657][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:01:10][351786693560657][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:01:10][351786693560657][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:01:10][351786693560657][419 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 09:01:10][351786693560657][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:01:10][351786693560657][419 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:01:10][351786693560657][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693560657\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9315\"}'\'' -e'"" [2025-09-06 09:01:10][351786693560657][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:01:10][351786693560657][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693560657\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9315\"}'\'' -e'"" [2025-09-06 09:01:16][351786693560657][6183 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7bf998b3-c8aa-4325-ac83-5fecce8d4df9","id":"QR_7bf998b3-c8aa-4325-ac83-5fecce8d4df9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:01:16][351786693560657][6339 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-06 09:01:16][351786693560657][6339 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-06 09:01:16][351786693560657][6340 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:07:05][352397453591863][1 ms][INFO] === Request start === [2025-09-06 09:07:05][352397453591863][1 ms][DEBUG] START check_scloud [2025-09-06 09:07:05][352397453591863][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:07:05][352397453591863][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 22018 4972 24445084 145964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:07:05][352397453591863][305 ms][DEBUG] targetPkg: running [2025-09-06 09:07:05][352397453591863][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 09:07:05][352397453591863][305 ms][DEBUG] START check_boot_completed [2025-09-06 09:07:05][352397453591863][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:07:05][352397453591863][350 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 09:07:05][352397453591863][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:07:05][352397453591863][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:07:05][352397453591863][396 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-06 09:07:05][352397453591863][396 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:07:05][352397453591863][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453591863\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2752\"}'\'' -e'"" [2025-09-06 09:07:05][352397453591863][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:07:05][352397453591863][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453591863\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2752\"}'\'' -e'"" [2025-09-06 09:07:10][352397453591863][5458 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6462d30-dcce-45d1-81de-e6cabb578c81","id":"QR_a6462d30-dcce-45d1-81de-e6cabb578c81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:07:10][352397453591863][5614 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 09:07:10][352397453591863][5614 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 09:07:10][352397453591863][5614 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:07:13][352397453591863][0 ms][INFO] === Request start === [2025-09-06 09:07:13][352397453591863][1 ms][DEBUG] START check_scloud [2025-09-06 09:07:13][352397453591863][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:07:13][352397453591863][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 22018 4972 24593828 135396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:07:13][352397453591863][307 ms][DEBUG] targetPkg: running [2025-09-06 09:07:13][352397453591863][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 09:07:13][352397453591863][307 ms][DEBUG] START check_boot_completed [2025-09-06 09:07:13][352397453591863][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:07:13][352397453591863][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:07:13][352397453591863][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:07:13][352397453591863][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:07:13][352397453591863][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:07:13][352397453591863][386 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:07:13][352397453591863][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453591863\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7542\"}'\'' -e'"" [2025-09-06 09:07:13][352397453591863][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:07:13][352397453591863][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453591863\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7542\"}'\'' -e'"" [2025-09-06 09:07:19][352397453591863][5806 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_436721f1-248b-4e3b-8f68-02ed40a8c086","id":"QR_436721f1-248b-4e3b-8f68-02ed40a8c086","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:07:19][352397453591863][5962 ms][DEBUG] proc_open done in 5576 ms; code=255; res.len=3343 [2025-09-06 09:07:19][352397453591863][5962 ms][DEBUG] END runCmdUntilRes#1 in 5576 ms [2025-09-06 09:07:19][352397453591863][5962 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:10:04][354411845473645][1 ms][INFO] === Request start === [2025-09-06 09:10:04][354411845473645][1 ms][DEBUG] START check_scloud [2025-09-06 09:10:04][354411845473645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:10:04][354411845473645][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 22018 4972 24683108 149444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:10:04][354411845473645][307 ms][DEBUG] targetPkg: running [2025-09-06 09:10:04][354411845473645][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 09:10:04][354411845473645][307 ms][DEBUG] START check_boot_completed [2025-09-06 09:10:04][354411845473645][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:10:04][354411845473645][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:10:04][354411845473645][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:10:04][354411845473645][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:10:04][354411845473645][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 09:10:04][354411845473645][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:10:04][354411845473645][509 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2658\nsuccessfulTxPacketsPerSecond: 0.3334786111441288\nretriedTxPackets: 506\nretriedTxPacketsPerSecond: 0.07263890539773102\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2506\nsuccessfulRxPacketsPerSecond: 0.3037626952996025\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:10:04][354411845473645][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:10:05][354411845473645][1884 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.256/301.256/301.256/0.000 ms\n [2025-09-06 09:10:05][354411845473645][1884 ms][DEBUG] check_internet: online [2025-09-06 09:10:05][354411845473645][1884 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:10:05][354411845473645][1884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411845473645\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2020\"}'\'' -e'"" [2025-09-06 09:10:05][354411845473645][1884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:10:05][354411845473645][1884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411845473645\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2020\"}'\'' -e'"" [2025-09-06 09:10:09][354411845473645][5727 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e58c4443-04ca-438d-9ad6-73d809d1d0c3","id":"QR_e58c4443-04ca-438d-9ad6-73d809d1d0c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:10:09][354411845473645][5883 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-09-06 09:10:09][354411845473645][5883 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-06 09:10:09][354411845473645][5883 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:10:12][354411845473645][0 ms][INFO] === Request start === [2025-09-06 09:10:12][354411845473645][1 ms][DEBUG] START check_scloud [2025-09-06 09:10:12][354411845473645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:10:12][354411845473645][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22018 4972 24813296 161212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:10:12][354411845473645][308 ms][DEBUG] targetPkg: running [2025-09-06 09:10:12][354411845473645][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 09:10:12][354411845473645][308 ms][DEBUG] START check_boot_completed [2025-09-06 09:10:12][354411845473645][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:10:12][354411845473645][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:10:12][354411845473645][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:10:12][354411845473645][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 09:10:12][354411845473645][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:10:12][354411845473645][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:10:12][354411845473645][542 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2658\nsuccessfulTxPacketsPerSecond: 0.3334786111441288\nretriedTxPackets: 506\nretriedTxPacketsPerSecond: 0.07263890539773102\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2506\nsuccessfulRxPacketsPerSecond: 0.3037626952996025\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:10:12][354411845473645][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:10:13][354411845473645][932 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=296 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 296.320/296.320/296.320/0.000 ms\n [2025-09-06 09:10:13][354411845473645][933 ms][DEBUG] check_internet: online [2025-09-06 09:10:13][354411845473645][933 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:10:13][354411845473645][933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411845473645\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4851\"}'\'' -e'"" [2025-09-06 09:10:13][354411845473645][933 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:10:13][354411845473645][933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354411845473645\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4851\"}'\'' -e'"" [2025-09-06 09:10:18][354411845473645][6087 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a25cce86-0d40-410f-bf5b-aa1f8009a2f4","id":"QR_a25cce86-0d40-410f-bf5b-aa1f8009a2f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:10:18][354411845473645][6243 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 09:10:18][354411845473645][6244 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 09:10:18][354411845473645][6244 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:20:03][351477971979526][1 ms][INFO] === Request start === [2025-09-06 09:20:03][351477971979526][1 ms][DEBUG] START check_scloud [2025-09-06 09:20:03][351477971979526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:20:04][351477971979526][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 22018 4972 24931876 171028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:20:04][351477971979526][291 ms][DEBUG] targetPkg: running [2025-09-06 09:20:04][351477971979526][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-06 09:20:04][351477971979526][291 ms][DEBUG] START check_boot_completed [2025-09-06 09:20:04][351477971979526][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:20:04][351477971979526][322 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:20:04][351477971979526][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:20:04][351477971979526][369 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:20:04][351477971979526][369 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:20:04][351477971979526][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:20:04][351477971979526][494 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2919\nsuccessfulTxPacketsPerSecond: 0.36868624800294947\nretriedTxPackets: 564\nretriedTxPacketsPerSecond: 0.07307295005463864\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2732\nsuccessfulRxPacketsPerSecond: 0.30225629340782345\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:20:04][351477971979526][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:20:05][351477971979526][1884 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.172/300.172/300.172/0.000 ms\n [2025-09-06 09:20:05][351477971979526][1884 ms][DEBUG] check_internet: online [2025-09-06 09:20:05][351477971979526][1884 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:20:05][351477971979526][1884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477971979526\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5371\"}'\'' -e'"" [2025-09-06 09:20:05][351477971979526][1884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:20:05][351477971979526][1884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477971979526\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5371\"}'\'' -e'"" [2025-09-06 09:20:09][351477971979526][5821 ms][DEBUG] proc_open done in 3937 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 09:20:09][351477971979526][5821 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-09-06 09:20:09][351477971979526][5821 ms][WARN] Detected error: Process with pid 22018 either refused to load frida-agent, or terminated during injectionProcess with pid 22018 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 09:20:09][351477971979526][5821 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 09:20:10][351477971979526][6118 ms][DEBUG] SU: done in 296 ms; outsystem 5389 4972 12881108 210632 ep_poll 0 S system_server\n [2025-09-06 09:20:10][351477971979526][6118 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 09:20:10][351477971979526][6258 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 09:20:10][351477971979526][6258 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 09:20:10][351477971979526][6258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 09:20:10][351477971979526][6399 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 09:20:10][351477971979526][6399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 09:20:10][351477971979526][6602 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 09:20:12][351477971979526][8617 ms][DEBUG] START check_boot_completed [2025-09-06 09:20:12][351477971979526][8617 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:20:12][351477971979526][8664 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:20:12][351477971979526][8664 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:20:12][351477971979526][8711 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:20:12][351477971979526][8711 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 09:20:15][351477971979526][11725 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 09:20:15][351477971979526][11725 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477971979526\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5371\"}'\'' -e'"" [2025-09-06 09:20:19][351477971979526][15475 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_942b0115-8bdc-42c6-ad89-e396791b78d2","id":"QR_942b0115-8bdc-42c6-ad89-e396791b78d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:20:19][351477971979526][15631 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-06 09:20:19][351477971979526][15631 ms][DEBUG] END runCmdUntilRes#2 in 3905 ms [2025-09-06 09:20:19][351477971979526][15631 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:20:21][351477971979526][0 ms][INFO] === Request start === [2025-09-06 09:20:21][351477971979526][1 ms][DEBUG] START check_scloud [2025-09-06 09:20:21][351477971979526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:20:22][351477971979526][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 25222 4972 23666204 125100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:20:22][351477971979526][287 ms][DEBUG] targetPkg: running [2025-09-06 09:20:22][351477971979526][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-06 09:20:22][351477971979526][287 ms][DEBUG] START check_boot_completed [2025-09-06 09:20:22][351477971979526][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:20:22][351477971979526][334 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:20:22][351477971979526][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:20:22][351477971979526][396 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 09:20:22][351477971979526][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:20:22][351477971979526][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:20:22][351477971979526][552 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2919\nsuccessfulTxPacketsPerSecond: 0.36868624800294947\nretriedTxPackets: 564\nretriedTxPacketsPerSecond: 0.07307295005463864\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2732\nsuccessfulRxPacketsPerSecond: 0.30225629340782345\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:20:22][351477971979526][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:20:22][351477971979526][990 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=326 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 326.804/326.804/326.804/0.000 ms\n [2025-09-06 09:20:22][351477971979526][990 ms][DEBUG] check_internet: online [2025-09-06 09:20:22][351477971979526][990 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:20:22][351477971979526][990 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477971979526\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5533\"}'\'' -e'"" [2025-09-06 09:20:22][351477971979526][990 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:20:22][351477971979526][990 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477971979526\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5533\"}'\'' -e'"" [2025-09-06 09:20:27][351477971979526][5926 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9f78233-6693-4fc2-aa63-07c40130c7ae","id":"QR_d9f78233-6693-4fc2-aa63-07c40130c7ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:20:27][351477971979526][6082 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-06 09:20:27][351477971979526][6082 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-06 09:20:27][351477971979526][6082 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:21:03][356414819007827][0 ms][INFO] === Request start === [2025-09-06 09:21:03][356414819007827][1 ms][DEBUG] START check_scloud [2025-09-06 09:21:03][356414819007827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:21:03][356414819007827][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 25222 4972 23743996 138780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:21:03][356414819007827][300 ms][DEBUG] targetPkg: running [2025-09-06 09:21:03][356414819007827][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 09:21:03][356414819007827][300 ms][DEBUG] START check_boot_completed [2025-09-06 09:21:03][356414819007827][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:21:03][356414819007827][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:21:03][356414819007827][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:21:03][356414819007827][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:21:03][356414819007827][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:21:03][356414819007827][378 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:21:03][356414819007827][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819007827\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6165\"}'\'' -e'"" [2025-09-06 09:21:03][356414819007827][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:21:03][356414819007827][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819007827\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6165\"}'\'' -e'"" [2025-09-06 09:21:07][356414819007827][3721 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ee4de0a-f50e-47c4-b318-3aec12a8dc40","id":"QR_1ee4de0a-f50e-47c4-b318-3aec12a8dc40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:21:07][356414819007827][3877 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-06 09:21:07][356414819007827][3878 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-06 09:21:07][356414819007827][3878 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:21:09][356414819007827][0 ms][INFO] === Request start === [2025-09-06 09:21:09][356414819007827][1 ms][DEBUG] START check_scloud [2025-09-06 09:21:09][356414819007827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:21:09][356414819007827][236 ms][DEBUG] SU: done in 235 ms; outu0_a118 25222 4972 23874180 150512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:21:09][356414819007827][236 ms][DEBUG] targetPkg: running [2025-09-06 09:21:09][356414819007827][236 ms][DEBUG] END check_scloud in 235 ms [2025-09-06 09:21:09][356414819007827][236 ms][DEBUG] START check_boot_completed [2025-09-06 09:21:09][356414819007827][236 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:21:09][356414819007827][267 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:21:09][356414819007827][267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:21:09][356414819007827][314 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:21:09][356414819007827][314 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:21:09][356414819007827][314 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:21:09][356414819007827][314 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819007827\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7937\"}'\'' -e'"" [2025-09-06 09:21:09][356414819007827][314 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:21:09][356414819007827][314 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819007827\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7937\"}'\'' -e'"" [2025-09-06 09:21:14][356414819007827][5078 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79b943c1-633f-420f-8c2d-5f835b823801","id":"QR_79b943c1-633f-420f-8c2d-5f835b823801","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:21:14][356414819007827][5235 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-06 09:21:14][356414819007827][5235 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-06 09:21:14][356414819007827][5235 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:24:03][351692592284896][1 ms][INFO] === Request start === [2025-09-06 09:24:03][351692592284896][1 ms][DEBUG] START check_scloud [2025-09-06 09:24:03][351692592284896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:24:03][351692592284896][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 25222 4972 24024788 161708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:24:03][351692592284896][298 ms][DEBUG] targetPkg: running [2025-09-06 09:24:03][351692592284896][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 09:24:03][351692592284896][298 ms][DEBUG] START check_boot_completed [2025-09-06 09:24:03][351692592284896][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:24:03][351692592284896][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:24:03][351692592284896][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:24:03][351692592284896][393 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 09:24:03][351692592284896][394 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 09:24:03][351692592284896][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:24:03][351692592284896][517 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3052\nsuccessfulTxPacketsPerSecond: 0.44219394693007685\nretriedTxPackets: 593\nretriedTxPacketsPerSecond: 0.09641822902986638\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2853\nsuccessfulRxPacketsPerSecond: 0.40229674871082177\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:24:03][351692592284896][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:24:04][351692592284896][939 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=308 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 308.102/308.102/308.102/0.000 ms\n [2025-09-06 09:24:04][351692592284896][939 ms][DEBUG] check_internet: online [2025-09-06 09:24:04][351692592284896][939 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:24:04][351692592284896][939 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351692592284896\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9130\"}'\'' -e'"" [2025-09-06 09:24:04][351692592284896][939 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:24:04][351692592284896][939 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351692592284896\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9130\"}'\'' -e'"" [2025-09-06 09:24:08][351692592284896][5484 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac21f1af-6015-4ab4-89f0-17b4361b3c52","id":"QR_ac21f1af-6015-4ab4-89f0-17b4361b3c52","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:24:08][351692592284896][5640 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-06 09:24:08][351692592284896][5640 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-06 09:24:08][351692592284896][5640 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:24:11][351692592284896][0 ms][INFO] === Request start === [2025-09-06 09:24:11][351692592284896][1 ms][DEBUG] START check_scloud [2025-09-06 09:24:11][351692592284896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:24:11][351692592284896][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 25222 4972 24159068 172416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:24:11][351692592284896][306 ms][DEBUG] targetPkg: running [2025-09-06 09:24:11][351692592284896][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 09:24:11][351692592284896][306 ms][DEBUG] START check_boot_completed [2025-09-06 09:24:11][351692592284896][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:24:11][351692592284896][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:24:11][351692592284896][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:24:11][351692592284896][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:24:11][351692592284896][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:24:11][351692592284896][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:24:11][351692592284896][509 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3052\nsuccessfulTxPacketsPerSecond: 0.44219394693007685\nretriedTxPackets: 593\nretriedTxPacketsPerSecond: 0.09641822902986638\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2853\nsuccessfulRxPacketsPerSecond: 0.40229674871082177\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:24:11][351692592284896][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:24:11][351692592284896][899 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=262 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 262.463/262.463/262.463/0.000 ms\n [2025-09-06 09:24:11][351692592284896][899 ms][DEBUG] check_internet: online [2025-09-06 09:24:11][351692592284896][899 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:24:11][351692592284896][900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351692592284896\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8144\"}'\'' -e'"" [2025-09-06 09:24:11][351692592284896][900 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:24:11][351692592284896][900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351692592284896\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8144\"}'\'' -e'"" [2025-09-06 09:24:17][351692592284896][6054 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b0be105-fd55-40a1-ba9f-6eeae7356dac","id":"QR_9b0be105-fd55-40a1-ba9f-6eeae7356dac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:24:17][351692592284896][6210 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 09:24:17][351692592284896][6210 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 09:24:17][351692592284896][6210 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:28:04][353722795679887][1 ms][INFO] === Request start === [2025-09-06 09:28:04][353722795679887][1 ms][DEBUG] START check_scloud [2025-09-06 09:28:04][353722795679887][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:28:04][353722795679887][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 25222 4972 24250268 184724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:28:04][353722795679887][273 ms][DEBUG] targetPkg: running [2025-09-06 09:28:04][353722795679887][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-06 09:28:04][353722795679887][273 ms][DEBUG] START check_boot_completed [2025-09-06 09:28:04][353722795679887][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:28:04][353722795679887][320 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:28:04][353722795679887][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:28:04][353722795679887][414 ms][DEBUG] SU: done in 93 ms; out [2025-09-06 09:28:04][353722795679887][414 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 09:28:04][353722795679887][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:28:04][353722795679887][539 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3123\nsuccessfulTxPacketsPerSecond: 0.415085735666388\nretriedTxPackets: 612\nretriedTxPacketsPerSecond: 0.11107928137551228\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2916\nsuccessfulRxPacketsPerSecond: 0.3683155119293302\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:28:04][353722795679887][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:28:06][353722795679887][1929 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.270/292.270/292.270/0.000 ms\n [2025-09-06 09:28:06][353722795679887][1929 ms][DEBUG] check_internet: online [2025-09-06 09:28:06][353722795679887][1929 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:28:06][353722795679887][1929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722795679887\",\"model\":\"SM-P610\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N90C2BHD\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5323\"}'\'' -e'"" [2025-09-06 09:28:06][353722795679887][1929 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:28:06][353722795679887][1929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722795679887\",\"model\":\"SM-P610\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N90C2BHD\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5323\"}'\'' -e'"" [2025-09-06 09:28:10][353722795679887][5944 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c3bcade-c555-4491-bee3-2e791f996db6","id":"QR_5c3bcade-c555-4491-bee3-2e791f996db6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:28:10][353722795679887][6100 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-09-06 09:28:10][353722795679887][6100 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-09-06 09:28:10][353722795679887][6100 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:32:04][350229404709801][1 ms][INFO] === Request start === [2025-09-06 09:32:04][350229404709801][1 ms][DEBUG] START check_scloud [2025-09-06 09:32:04][350229404709801][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:32:04][350229404709801][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 25222 4972 24376256 195756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:32:04][350229404709801][292 ms][DEBUG] targetPkg: running [2025-09-06 09:32:04][350229404709801][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 09:32:04][350229404709801][292 ms][DEBUG] START check_boot_completed [2025-09-06 09:32:04][350229404709801][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:32:04][350229404709801][339 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:32:04][350229404709801][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:32:04][350229404709801][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 09:32:04][350229404709801][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:32:04][350229404709801][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:32:04][350229404709801][526 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3177\nsuccessfulTxPacketsPerSecond: 0.1795087444028176\nretriedTxPackets: 638\nretriedTxPacketsPerSecond: 0.08643013619394922\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2956\nsuccessfulRxPacketsPerSecond: 0.13296944029838342\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:32:04][350229404709801][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:32:05][350229404709801][901 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=281 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 281.415/281.415/281.415/0.000 ms\n [2025-09-06 09:32:05][350229404709801][901 ms][DEBUG] check_internet: online [2025-09-06 09:32:05][350229404709801][901 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:32:05][350229404709801][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350229404709801\",\"model\":\"SM-S928W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8801\"}'\'' -e'"" [2025-09-06 09:32:05][350229404709801][902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:32:05][350229404709801][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350229404709801\",\"model\":\"SM-S928W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8801\"}'\'' -e'"" [2025-09-06 09:32:11][350229404709801][6665 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8cb2a13f-b58f-40a7-b220-80abf779a6f9","id":"QR_8cb2a13f-b58f-40a7-b220-80abf779a6f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:32:11][350229404709801][6821 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-06 09:32:11][350229404709801][6821 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-06 09:32:11][350229404709801][6822 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:32:14][350229404709801][0 ms][INFO] === Request start === [2025-09-06 09:32:14][350229404709801][1 ms][DEBUG] START check_scloud [2025-09-06 09:32:14][350229404709801][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:32:15][350229404709801][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 25222 4972 24545480 207628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:32:15][350229404709801][290 ms][DEBUG] targetPkg: running [2025-09-06 09:32:15][350229404709801][290 ms][DEBUG] END check_scloud in 290 ms [2025-09-06 09:32:15][350229404709801][290 ms][DEBUG] START check_boot_completed [2025-09-06 09:32:15][350229404709801][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:32:15][350229404709801][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:32:15][350229404709801][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:32:15][350229404709801][385 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 09:32:15][350229404709801][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 09:32:15][350229404709801][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:32:15][350229404709801][509 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3177\nsuccessfulTxPacketsPerSecond: 0.1795087444028176\nretriedTxPackets: 638\nretriedTxPacketsPerSecond: 0.08643013619394922\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2956\nsuccessfulRxPacketsPerSecond: 0.13296944029838342\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:32:15][350229404709801][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:32:15][350229404709801][964 ms][DEBUG] SU: done in 455 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=332 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 332.144/332.144/332.144/0.000 ms\n [2025-09-06 09:32:15][350229404709801][964 ms][DEBUG] check_internet: online [2025-09-06 09:32:15][350229404709801][964 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:32:15][350229404709801][964 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350229404709801\",\"model\":\"SM-S928W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2091\"}'\'' -e'"" [2025-09-06 09:32:15][350229404709801][964 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:32:15][350229404709801][964 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350229404709801\",\"model\":\"SM-S928W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2091\"}'\'' -e'"" [2025-09-06 09:32:19][350229404709801][4601 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_571cb661-b47d-4dd3-b21c-09c0b10833a5","id":"QR_571cb661-b47d-4dd3-b21c-09c0b10833a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:32:19][350229404709801][4758 ms][DEBUG] proc_open done in 3793 ms; code=255; res.len=3343 [2025-09-06 09:32:19][350229404709801][4758 ms][DEBUG] END runCmdUntilRes#1 in 3793 ms [2025-09-06 09:32:19][350229404709801][4758 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:32:21][351233875641880][0 ms][INFO] === Request start === [2025-09-06 09:32:21][351233875641880][1 ms][DEBUG] START check_scloud [2025-09-06 09:32:21][351233875641880][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:32:21][351233875641880][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 25222 4972 24667600 218228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:32:21][351233875641880][267 ms][DEBUG] targetPkg: running [2025-09-06 09:32:21][351233875641880][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-06 09:32:21][351233875641880][267 ms][DEBUG] START check_boot_completed [2025-09-06 09:32:21][351233875641880][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:32:21][351233875641880][313 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:32:21][351233875641880][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:32:21][351233875641880][360 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:32:21][351233875641880][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 09:32:21][351233875641880][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:32:21][351233875641880][485 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3177\nsuccessfulTxPacketsPerSecond: 0.1795087444028176\nretriedTxPackets: 638\nretriedTxPacketsPerSecond: 0.08643013619394922\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2956\nsuccessfulRxPacketsPerSecond: 0.13296944029838342\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:32:21][351233875641880][486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:32:22][351233875641880][892 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=281 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 281.800/281.800/281.800/0.000 ms\n [2025-09-06 09:32:22][351233875641880][892 ms][DEBUG] check_internet: online [2025-09-06 09:32:22][351233875641880][892 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:32:22][351233875641880][892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351233875641880\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9027\"}'\'' -e'"" [2025-09-06 09:32:22][351233875641880][892 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:32:22][351233875641880][892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351233875641880\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9027\"}'\'' -e'"" [2025-09-06 09:32:25][351233875641880][4375 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe980327-6c10-4145-8d88-168df3e4776b","id":"QR_fe980327-6c10-4145-8d88-168df3e4776b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:32:25][351233875641880][4531 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-06 09:32:25][351233875641880][4531 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-06 09:32:25][351233875641880][4531 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:32:28][351233875641880][0 ms][INFO] === Request start === [2025-09-06 09:32:28][351233875641880][1 ms][DEBUG] START check_scloud [2025-09-06 09:32:28][351233875641880][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:32:28][351233875641880][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 25222 4972 24804020 230124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:32:28][351233875641880][253 ms][DEBUG] targetPkg: running [2025-09-06 09:32:28][351233875641880][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-06 09:32:28][351233875641880][253 ms][DEBUG] START check_boot_completed [2025-09-06 09:32:28][351233875641880][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:32:28][351233875641880][284 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:32:28][351233875641880][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:32:28][351233875641880][331 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:32:28][351233875641880][331 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:32:28][351233875641880][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:32:28][351233875641880][440 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3177\nsuccessfulTxPacketsPerSecond: 0.1795087444028176\nretriedTxPackets: 638\nretriedTxPacketsPerSecond: 0.08643013619394922\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2956\nsuccessfulRxPacketsPerSecond: 0.13296944029838342\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:32:28][351233875641880][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:32:29][351233875641880][846 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.392/275.392/275.392/0.000 ms\n [2025-09-06 09:32:29][351233875641880][846 ms][DEBUG] check_internet: online [2025-09-06 09:32:29][351233875641880][846 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:32:29][351233875641880][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351233875641880\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1293\"}'\'' -e'"" [2025-09-06 09:32:29][351233875641880][846 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:32:29][351233875641880][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351233875641880\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1293\"}'\'' -e'"" [2025-09-06 09:32:33][351233875641880][5579 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f83f94e8-f997-4fbc-9077-06d3881272db","id":"QR_f83f94e8-f997-4fbc-9077-06d3881272db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:32:33][351233875641880][5736 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 09:32:33][351233875641880][5736 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 09:32:33][351233875641880][5736 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:34:03][352397450640242][0 ms][INFO] === Request start === [2025-09-06 09:34:03][352397450640242][1 ms][DEBUG] START check_scloud [2025-09-06 09:34:03][352397450640242][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:34:04][352397450640242][282 ms][DEBUG] SU: done in 282 ms; outu0_a118 25222 4972 24917840 241636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:34:04][352397450640242][283 ms][DEBUG] targetPkg: running [2025-09-06 09:34:04][352397450640242][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-06 09:34:04][352397450640242][283 ms][DEBUG] START check_boot_completed [2025-09-06 09:34:04][352397450640242][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:34:04][352397450640242][329 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:34:04][352397450640242][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:34:04][352397450640242][392 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 09:34:04][352397450640242][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:34:04][352397450640242][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:34:04][352397450640242][518 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3177\nsuccessfulTxPacketsPerSecond: 0.1795087444028176\nretriedTxPackets: 638\nretriedTxPacketsPerSecond: 0.08643013619394922\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2956\nsuccessfulRxPacketsPerSecond: 0.13296944029838342\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:34:04][352397450640242][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:34:05][352397450640242][1970 ms][DEBUG] SU: done in 1451 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.544/301.544/301.544/0.000 ms\n [2025-09-06 09:34:05][352397450640242][1970 ms][DEBUG] check_internet: online [2025-09-06 09:34:05][352397450640242][1970 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:34:05][352397450640242][1970 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450640242\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9687\"}'\'' -e'"" [2025-09-06 09:34:05][352397450640242][1970 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:34:05][352397450640242][1970 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450640242\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9687\"}'\'' -e'"" [2025-09-06 09:34:09][352397450640242][5734 ms][DEBUG] proc_open done in 3764 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 09:34:09][352397450640242][5735 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-09-06 09:34:09][352397450640242][5735 ms][WARN] Detected error: Process with pid 25222 either refused to load frida-agent, or terminated during injectionProcess with pid 25222 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 09:34:09][352397450640242][5735 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 09:34:09][352397450640242][5984 ms][DEBUG] SU: done in 249 ms; outsystem 5389 4972 12784564 183584 ep_poll 0 S system_server\n [2025-09-06 09:34:09][352397450640242][5984 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 09:34:09][352397450640242][6125 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 09:34:09][352397450640242][6125 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 09:34:09][352397450640242][6125 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 09:34:09][352397450640242][6265 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 09:34:09][352397450640242][6265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 09:34:10][352397450640242][6437 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 09:34:12][352397450640242][8452 ms][DEBUG] START check_boot_completed [2025-09-06 09:34:12][352397450640242][8452 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:34:12][352397450640242][8499 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:34:12][352397450640242][8499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:34:12][352397450640242][8546 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:34:12][352397450640242][8547 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 09:34:15][352397450640242][11561 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 09:34:15][352397450640242][11561 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450640242\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9687\"}'\'' -e'"" [2025-09-06 09:34:18][352397450640242][15216 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a58fcec-b74b-4b09-8b77-3bc9038e8374","id":"QR_4a58fcec-b74b-4b09-8b77-3bc9038e8374","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:34:19][352397450640242][15372 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-06 09:34:19][352397450640242][15372 ms][DEBUG] END runCmdUntilRes#2 in 3812 ms [2025-09-06 09:34:19][352397450640242][15373 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:34:21][352397450640242][1 ms][INFO] === Request start === [2025-09-06 09:34:21][352397450640242][1 ms][DEBUG] START check_scloud [2025-09-06 09:34:21][352397450640242][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:34:21][352397450640242][230 ms][DEBUG] SU: done in 229 ms; outu0_a118 26833 4972 23647840 124804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:34:21][352397450640242][230 ms][DEBUG] targetPkg: running [2025-09-06 09:34:21][352397450640242][230 ms][DEBUG] END check_scloud in 229 ms [2025-09-06 09:34:21][352397450640242][230 ms][DEBUG] START check_boot_completed [2025-09-06 09:34:21][352397450640242][230 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:34:21][352397450640242][261 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:34:21][352397450640242][262 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:34:21][352397450640242][308 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:34:21][352397450640242][308 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:34:21][352397450640242][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:34:21][352397450640242][404 ms][DEBUG] SU: done in 96 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3177\nsuccessfulTxPacketsPerSecond: 0.1795087444028176\nretriedTxPackets: 638\nretriedTxPacketsPerSecond: 0.08643013619394922\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2956\nsuccessfulRxPacketsPerSecond: 0.13296944029838342\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:34:21][352397450640242][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:34:22][352397450640242][933 ms][DEBUG] SU: done in 529 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=416 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 416.362/416.362/416.362/0.000 ms\n [2025-09-06 09:34:22][352397450640242][933 ms][DEBUG] check_internet: online [2025-09-06 09:34:22][352397450640242][934 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:34:22][352397450640242][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450640242\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8955\"}'\'' -e'"" [2025-09-06 09:34:22][352397450640242][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:34:22][352397450640242][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450640242\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8955\"}'\'' -e'"" [2025-09-06 09:34:27][352397450640242][5869 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_512d64d5-1e2e-4a78-b20b-ad6809c3dcf4","id":"QR_512d64d5-1e2e-4a78-b20b-ad6809c3dcf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:34:27][352397450640242][6026 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-06 09:34:27][352397450640242][6026 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-06 09:34:27][352397450640242][6026 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:40:03][350178733708218][1 ms][INFO] === Request start === [2025-09-06 09:40:03][350178733708218][1 ms][DEBUG] START check_scloud [2025-09-06 09:40:03][350178733708218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:40:03][350178733708218][346 ms][DEBUG] SU: done in 345 ms; outu0_a118 26833 4972 23720360 94560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:40:03][350178733708218][346 ms][DEBUG] targetPkg: running [2025-09-06 09:40:03][350178733708218][346 ms][DEBUG] END check_scloud in 345 ms [2025-09-06 09:40:03][350178733708218][346 ms][DEBUG] START check_boot_completed [2025-09-06 09:40:03][350178733708218][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:40:03][350178733708218][377 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:40:03][350178733708218][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:40:03][350178733708218][424 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:40:03][350178733708218][424 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:40:03][350178733708218][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:40:03][350178733708218][549 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3856\nsuccessfulTxPacketsPerSecond: 20.990935206441673\nretriedTxPackets: 753\nretriedTxPacketsPerSecond: 2.2330931468569464\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3637\nsuccessfulRxPacketsPerSecond: 22.0059657662846\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:40:03][350178733708218][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:40:05][350178733708218][1970 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.230/303.230/303.230/0.000 ms\n [2025-09-06 09:40:05][350178733708218][1971 ms][DEBUG] check_internet: online [2025-09-06 09:40:05][350178733708218][1971 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:40:05][350178733708218][1971 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733708218\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8212\"}'\'' -e'"" [2025-09-06 09:40:05][350178733708218][1971 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:40:05][350178733708218][1971 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733708218\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8212\"}'\'' -e'"" [2025-09-06 09:40:09][350178733708218][5907 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4201e619-d555-40eb-9e70-99cd7fdd56a1","id":"QR_4201e619-d555-40eb-9e70-99cd7fdd56a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:40:09][350178733708218][6063 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-09-06 09:40:09][350178733708218][6063 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-06 09:40:09][350178733708218][6063 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:40:11][350178733708218][0 ms][INFO] === Request start === [2025-09-06 09:40:11][350178733708218][1 ms][DEBUG] START check_scloud [2025-09-06 09:40:11][350178733708218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:40:12][350178733708218][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 26833 4972 23854640 109876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:40:12][350178733708218][320 ms][DEBUG] targetPkg: running [2025-09-06 09:40:12][350178733708218][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 09:40:12][350178733708218][321 ms][DEBUG] START check_boot_completed [2025-09-06 09:40:12][350178733708218][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:40:12][350178733708218][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:40:12][350178733708218][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:40:12][350178733708218][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 09:40:12][350178733708218][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:40:12][350178733708218][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:40:12][350178733708218][586 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3856\nsuccessfulTxPacketsPerSecond: 20.990935206441673\nretriedTxPackets: 753\nretriedTxPacketsPerSecond: 2.2330931468569464\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3637\nsuccessfulRxPacketsPerSecond: 22.0059657662846\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:40:12][350178733708218][586 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:40:12][350178733708218][1070 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=346 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 346.148/346.148/346.148/0.000 ms\n [2025-09-06 09:40:12][350178733708218][1070 ms][DEBUG] check_internet: online [2025-09-06 09:40:12][350178733708218][1070 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:40:12][350178733708218][1070 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733708218\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7794\"}'\'' -e'"" [2025-09-06 09:40:12][350178733708218][1070 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:40:12][350178733708218][1070 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178733708218\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7794\"}'\'' -e'"" [2025-09-06 09:40:18][350178733708218][6428 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_00d30264-1764-4cd9-929b-1ec57d251e34","id":"QR_00d30264-1764-4cd9-929b-1ec57d251e34","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:40:18][350178733708218][6584 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-06 09:40:18][350178733708218][6584 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-06 09:40:18][350178733708218][6584 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:44:04][352600226293406][1 ms][INFO] === Request start === [2025-09-06 09:44:04][352600226293406][1 ms][DEBUG] START check_scloud [2025-09-06 09:44:04][352600226293406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:44:04][352600226293406][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 26833 4972 23984752 120072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:44:04][352600226293406][300 ms][DEBUG] targetPkg: running [2025-09-06 09:44:04][352600226293406][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 09:44:04][352600226293406][300 ms][DEBUG] START check_boot_completed [2025-09-06 09:44:04][352600226293406][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:44:04][352600226293406][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:44:04][352600226293406][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:44:04][352600226293406][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:44:04][352600226293406][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:44:04][352600226293406][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:44:04][352600226293406][488 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4015\nsuccessfulTxPacketsPerSecond: 0.566082071219533\nretriedTxPackets: 806\nretriedTxPacketsPerSecond: 0.18869402373984434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3772\nsuccessfulRxPacketsPerSecond: 0.4806357208467733\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:44:04][352600226293406][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:44:04][352600226293406][910 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.575/316.575/316.575/0.000 ms\n [2025-09-06 09:44:04][352600226293406][910 ms][DEBUG] check_internet: online [2025-09-06 09:44:04][352600226293406][910 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:44:04][352600226293406][910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226293406\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8639\"}'\'' -e'"" [2025-09-06 09:44:04][352600226293406][910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:44:04][352600226293406][910 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226293406\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8639\"}'\'' -e'"" [2025-09-06 09:44:09][352600226293406][5674 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20ebd78b-3b75-4f8f-abac-5f99edf7aa15","id":"QR_20ebd78b-3b75-4f8f-abac-5f99edf7aa15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:44:09][352600226293406][5830 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-06 09:44:09][352600226293406][5830 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-06 09:44:09][352600226293406][5831 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:44:12][352600226293406][0 ms][INFO] === Request start === [2025-09-06 09:44:12][352600226293406][1 ms][DEBUG] START check_scloud [2025-09-06 09:44:12][352600226293406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:44:12][352600226293406][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 26833 4972 24127224 119276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:44:12][352600226293406][287 ms][DEBUG] targetPkg: running [2025-09-06 09:44:12][352600226293406][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-06 09:44:12][352600226293406][287 ms][DEBUG] START check_boot_completed [2025-09-06 09:44:12][352600226293406][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:44:12][352600226293406][334 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:44:12][352600226293406][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:44:12][352600226293406][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:44:12][352600226293406][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 09:44:12][352600226293406][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:44:12][352600226293406][507 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4015\nsuccessfulTxPacketsPerSecond: 0.566082071219533\nretriedTxPackets: 806\nretriedTxPacketsPerSecond: 0.18869402373984434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3772\nsuccessfulRxPacketsPerSecond: 0.4806357208467733\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:44:12][352600226293406][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:44:13][352600226293406][928 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.553/273.553/273.553/0.000 ms\n [2025-09-06 09:44:13][352600226293406][928 ms][DEBUG] check_internet: online [2025-09-06 09:44:13][352600226293406][928 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:44:13][352600226293406][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226293406\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6328\"}'\'' -e'"" [2025-09-06 09:44:13][352600226293406][928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:44:13][352600226293406][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226293406\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6328\"}'\'' -e'"" [2025-09-06 09:44:18][352600226293406][6270 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1357f887-7657-4829-b09c-da6da507dde6","id":"QR_1357f887-7657-4829-b09c-da6da507dde6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:44:18][352600226293406][6426 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-06 09:44:18][352600226293406][6426 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-09-06 09:44:18][352600226293406][6426 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:45:03][352674520350527][0 ms][INFO] === Request start === [2025-09-06 09:45:03][352674520350527][1 ms][DEBUG] START check_scloud [2025-09-06 09:45:03][352674520350527][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:45:03][352674520350527][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 26833 4972 24218232 129052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:45:03][352674520350527][264 ms][DEBUG] targetPkg: running [2025-09-06 09:45:03][352674520350527][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-06 09:45:03][352674520350527][264 ms][DEBUG] START check_boot_completed [2025-09-06 09:45:03][352674520350527][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:45:03][352674520350527][309 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 09:45:03][352674520350527][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:45:03][352674520350527][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:45:03][352674520350527][356 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 09:45:03][352674520350527][356 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:45:03][352674520350527][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520350527\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7760\"}'\'' -e'"" [2025-09-06 09:45:03][352674520350527][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:45:03][352674520350527][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520350527\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7760\"}'\'' -e'"" [2025-09-06 09:45:07][352674520350527][3809 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e5ba96c-42a9-442e-ae86-554f897ecc53","id":"QR_3e5ba96c-42a9-442e-ae86-554f897ecc53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:45:07][352674520350527][3965 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-06 09:45:07][352674520350527][3965 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-06 09:45:07][352674520350527][3965 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:45:09][352674520350527][0 ms][INFO] === Request start === [2025-09-06 09:45:09][352674520350527][1 ms][DEBUG] START check_scloud [2025-09-06 09:45:09][352674520350527][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:45:09][352674520350527][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 26833 4972 24358784 139976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:45:09][352674520350527][295 ms][DEBUG] targetPkg: running [2025-09-06 09:45:09][352674520350527][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 09:45:09][352674520350527][295 ms][DEBUG] START check_boot_completed [2025-09-06 09:45:09][352674520350527][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:45:09][352674520350527][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:45:09][352674520350527][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:45:10][352674520350527][404 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 09:45:10][352674520350527][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:45:10][352674520350527][404 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:45:10][352674520350527][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520350527\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3013\"}'\'' -e'"" [2025-09-06 09:45:10][352674520350527][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:45:10][352674520350527][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520350527\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3013\"}'\'' -e'"" [2025-09-06 09:45:15][352674520350527][5371 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a1ed86a-9454-4574-9746-520b1ab491a0","id":"QR_0a1ed86a-9454-4574-9746-520b1ab491a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:45:15][352674520350527][5527 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-09-06 09:45:15][352674520350527][5527 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-09-06 09:45:15][352674520350527][5527 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:46:03][352677531244266][0 ms][INFO] === Request start === [2025-09-06 09:46:03][352677531244266][1 ms][DEBUG] START check_scloud [2025-09-06 09:46:03][352677531244266][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:46:03][352677531244266][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 26833 4972 24499136 151736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:46:03][352677531244266][295 ms][DEBUG] targetPkg: running [2025-09-06 09:46:03][352677531244266][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 09:46:03][352677531244266][295 ms][DEBUG] START check_boot_completed [2025-09-06 09:46:03][352677531244266][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:46:03][352677531244266][342 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:46:03][352677531244266][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:46:04][352677531244266][435 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 09:46:04][352677531244266][435 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 09:46:04][352677531244266][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:46:04][352677531244266][591 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4015\nsuccessfulTxPacketsPerSecond: 0.566082071219533\nretriedTxPackets: 806\nretriedTxPacketsPerSecond: 0.18869402373984434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3772\nsuccessfulRxPacketsPerSecond: 0.4806357208467733\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:46:04][352677531244266][592 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:46:05][352677531244266][2388 ms][DEBUG] SU: done in 1796 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.922/299.922/299.922/0.000 ms\n [2025-09-06 09:46:05][352677531244266][2388 ms][DEBUG] check_internet: online [2025-09-06 09:46:05][352677531244266][2388 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:46:05][352677531244266][2388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531244266\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7124\"}'\'' -e'"" [2025-09-06 09:46:05][352677531244266][2388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:46:05][352677531244266][2388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531244266\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7124\"}'\'' -e'"" [2025-09-06 09:46:10][352677531244266][6418 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be6a9b47-e990-40ad-aab0-8703c6416c40","id":"QR_be6a9b47-e990-40ad-aab0-8703c6416c40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:46:10][352677531244266][6574 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-06 09:46:10][352677531244266][6574 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-06 09:46:10][352677531244266][6574 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:46:12][352677531244266][1 ms][INFO] === Request start === [2025-09-06 09:46:12][352677531244266][1 ms][DEBUG] START check_scloud [2025-09-06 09:46:12][352677531244266][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:46:12][352677531244266][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 26833 4972 24637640 162244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:46:12][352677531244266][254 ms][DEBUG] targetPkg: running [2025-09-06 09:46:12][352677531244266][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 09:46:12][352677531244266][254 ms][DEBUG] START check_boot_completed [2025-09-06 09:46:12][352677531244266][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:46:12][352677531244266][301 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:46:12][352677531244266][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:46:12][352677531244266][395 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 09:46:12][352677531244266][395 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 09:46:12][352677531244266][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:46:12][352677531244266][520 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4175\nsuccessfulTxPacketsPerSecond: 0.5314255157318559\nretriedTxPackets: 861\nretriedTxPacketsPerSecond: 0.1826775210328255\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3912\nsuccessfulRxPacketsPerSecond: 0.464997326265374\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:46:12][352677531244266][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:46:13][352677531244266][910 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.333/268.333/268.333/0.000 ms\n [2025-09-06 09:46:13][352677531244266][910 ms][DEBUG] check_internet: online [2025-09-06 09:46:13][352677531244266][911 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:46:13][352677531244266][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531244266\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1226\"}'\'' -e'"" [2025-09-06 09:46:13][352677531244266][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:46:13][352677531244266][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531244266\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1226\"}'\'' -e'"" [2025-09-06 09:46:18][352677531244266][5846 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c102d0c-fed3-4846-b4be-c51d5fbe603d","id":"QR_2c102d0c-fed3-4846-b4be-c51d5fbe603d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:46:18][352677531244266][6003 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-06 09:46:18][352677531244266][6003 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-06 09:46:18][352677531244266][6003 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:46:22][357962509592325][0 ms][INFO] === Request start === [2025-09-06 09:46:22][357962509592325][1 ms][DEBUG] START check_scloud [2025-09-06 09:46:22][357962509592325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:46:22][357962509592325][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 26833 4972 24757716 173784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:46:22][357962509592325][260 ms][DEBUG] targetPkg: running [2025-09-06 09:46:22][357962509592325][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-06 09:46:22][357962509592325][260 ms][DEBUG] START check_boot_completed [2025-09-06 09:46:22][357962509592325][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:46:23][357962509592325][306 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:46:23][357962509592325][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:46:23][357962509592325][355 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 09:46:23][357962509592325][355 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-06 09:46:23][357962509592325][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:46:23][357962509592325][478 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4175\nsuccessfulTxPacketsPerSecond: 0.5314255157318559\nretriedTxPackets: 861\nretriedTxPacketsPerSecond: 0.1826775210328255\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3912\nsuccessfulRxPacketsPerSecond: 0.464997326265374\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:46:23][357962509592325][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:46:23][357962509592325][885 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=276 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 276.575/276.575/276.575/0.000 ms\n [2025-09-06 09:46:23][357962509592325][885 ms][DEBUG] check_internet: online [2025-09-06 09:46:23][357962509592325][885 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:46:23][357962509592325][885 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509592325\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7595\"}'\'' -e'"" [2025-09-06 09:46:23][357962509592325][885 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:46:23][357962509592325][885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509592325\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7595\"}'\'' -e'"" [2025-09-06 09:46:27][357962509592325][4415 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98bbce20-b967-4a73-ac13-c23eb9771055","id":"QR_98bbce20-b967-4a73-ac13-c23eb9771055","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:46:27][357962509592325][4571 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-09-06 09:46:27][357962509592325][4571 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-06 09:46:27][357962509592325][4571 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:46:29][357962509592325][0 ms][INFO] === Request start === [2025-09-06 09:46:29][357962509592325][1 ms][DEBUG] START check_scloud [2025-09-06 09:46:29][357962509592325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:46:29][357962509592325][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 26833 4972 24920632 185660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:46:29][357962509592325][261 ms][DEBUG] targetPkg: running [2025-09-06 09:46:29][357962509592325][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 09:46:29][357962509592325][261 ms][DEBUG] START check_boot_completed [2025-09-06 09:46:29][357962509592325][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:46:29][357962509592325][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:46:29][357962509592325][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:46:29][357962509592325][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:46:29][357962509592325][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 09:46:29][357962509592325][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:46:29][357962509592325][464 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4175\nsuccessfulTxPacketsPerSecond: 0.5314255157318559\nretriedTxPackets: 861\nretriedTxPacketsPerSecond: 0.1826775210328255\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3912\nsuccessfulRxPacketsPerSecond: 0.464997326265374\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:46:29][357962509592325][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:46:30][357962509592325][792 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.593/227.593/227.593/0.000 ms\n [2025-09-06 09:46:30][357962509592325][792 ms][DEBUG] check_internet: online [2025-09-06 09:46:30][357962509592325][792 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:46:30][357962509592325][792 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509592325\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7692\"}'\'' -e'"" [2025-09-06 09:46:30][357962509592325][792 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:46:30][357962509592325][792 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509592325\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7692\"}'\'' -e'"" [2025-09-06 09:46:34][357962509592325][5119 ms][DEBUG] proc_open done in 4327 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 09:46:34][357962509592325][5119 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-09-06 09:46:34][357962509592325][5119 ms][WARN] Detected error: Process with pid 26833 either refused to load frida-agent, or terminated during injectionProcess with pid 26833 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 09:46:34][357962509592325][5119 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 09:46:34][357962509592325][5353 ms][DEBUG] SU: done in 234 ms; outsystem 5389 4972 12865040 190300 ep_poll 0 S system_server\n [2025-09-06 09:46:34][357962509592325][5354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 09:46:35][357962509592325][5494 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 09:46:35][357962509592325][5494 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 09:46:35][357962509592325][5494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 09:46:35][357962509592325][5619 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 09:46:35][357962509592325][5619 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 09:46:35][357962509592325][5838 ms][DEBUG] SU: done in 218 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 09:46:37][357962509592325][7853 ms][DEBUG] START check_boot_completed [2025-09-06 09:46:37][357962509592325][7853 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:46:37][357962509592325][7884 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:46:37][357962509592325][7884 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:46:37][357962509592325][7931 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:46:37][357962509592325][7931 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:46:40][357962509592325][10946 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 09:46:40][357962509592325][10946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509592325\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7692\"}'\'' -e'"" [2025-09-06 09:46:45][357962509592325][15710 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1546d492-535b-4d62-bf03-83b1f8596bf8","id":"QR_1546d492-535b-4d62-bf03-83b1f8596bf8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:46:45][357962509592325][15866 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-06 09:46:45][357962509592325][15866 ms][DEBUG] END runCmdUntilRes#2 in 4921 ms [2025-09-06 09:46:45][357962509592325][15866 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:47:03][356414816255098][0 ms][INFO] === Request start === [2025-09-06 09:47:03][356414816255098][1 ms][DEBUG] START check_scloud [2025-09-06 09:47:03][356414816255098][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:47:04][356414816255098][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 29708 4972 23682184 127264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:47:04][356414816255098][307 ms][DEBUG] targetPkg: running [2025-09-06 09:47:04][356414816255098][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 09:47:04][356414816255098][307 ms][DEBUG] START check_boot_completed [2025-09-06 09:47:04][356414816255098][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:47:04][356414816255098][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:47:04][356414816255098][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:47:04][356414816255098][431 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 09:47:04][356414816255098][431 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-06 09:47:04][356414816255098][431 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:47:04][356414816255098][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816255098\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2862\"}'\'' -e'"" [2025-09-06 09:47:04][356414816255098][432 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:47:04][356414816255098][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816255098\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2862\"}'\'' -e'"" [2025-09-06 09:47:07][356414816255098][3806 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e42bf907-b0d4-43dd-9187-6ce6bcc525de","id":"QR_e42bf907-b0d4-43dd-9187-6ce6bcc525de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:47:07][356414816255098][3962 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-06 09:47:07][356414816255098][3962 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-06 09:47:07][356414816255098][3962 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:47:10][356414816255098][0 ms][INFO] === Request start === [2025-09-06 09:47:10][356414816255098][0 ms][DEBUG] START check_scloud [2025-09-06 09:47:10][356414816255098][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:47:10][356414816255098][274 ms][DEBUG] SU: done in 274 ms; outu0_a118 29708 4972 23756576 138132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:47:10][356414816255098][275 ms][DEBUG] targetPkg: running [2025-09-06 09:47:10][356414816255098][275 ms][DEBUG] END check_scloud in 274 ms [2025-09-06 09:47:10][356414816255098][275 ms][DEBUG] START check_boot_completed [2025-09-06 09:47:10][356414816255098][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:47:10][356414816255098][306 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:47:10][356414816255098][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:47:10][356414816255098][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:47:10][356414816255098][353 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:47:10][356414816255098][353 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:47:10][356414816255098][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816255098\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3955\"}'\'' -e'"" [2025-09-06 09:47:10][356414816255098][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:47:10][356414816255098][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816255098\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3955\"}'\'' -e'"" [2025-09-06 09:47:15][356414816255098][4930 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af21d450-6200-49bc-bfee-6e54b3acfcdc","id":"QR_af21d450-6200-49bc-bfee-6e54b3acfcdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:47:15][356414816255098][5086 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-06 09:47:15][356414816255098][5086 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-06 09:47:15][356414816255098][5086 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:48:03][352665189520798][0 ms][INFO] === Request start === [2025-09-06 09:48:03][352665189520798][1 ms][DEBUG] START check_scloud [2025-09-06 09:48:03][352665189520798][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:48:03][352665189520798][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 29708 4972 23849952 149632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:48:03][352665189520798][311 ms][DEBUG] targetPkg: running [2025-09-06 09:48:03][352665189520798][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 09:48:03][352665189520798][311 ms][DEBUG] START check_boot_completed [2025-09-06 09:48:03][352665189520798][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:48:04][352665189520798][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:48:04][352665189520798][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:48:04][352665189520798][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:48:04][352665189520798][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 09:48:04][352665189520798][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:48:04][352665189520798][514 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4175\nsuccessfulTxPacketsPerSecond: 0.5314255157318559\nretriedTxPackets: 861\nretriedTxPacketsPerSecond: 0.1826775210328255\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3912\nsuccessfulRxPacketsPerSecond: 0.464997326265374\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:48:04][352665189520798][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:48:04][352665189520798][889 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.318/274.318/274.318/0.000 ms\n [2025-09-06 09:48:04][352665189520798][889 ms][DEBUG] check_internet: online [2025-09-06 09:48:04][352665189520798][889 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:48:04][352665189520798][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189520798\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8960\"}'\'' -e'"" [2025-09-06 09:48:04][352665189520798][889 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:48:04][352665189520798][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189520798\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8960\"}'\'' -e'"" [2025-09-06 09:48:08][352665189520798][5310 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3796128b-9a44-49a8-92dc-8b7b215df324","id":"QR_3796128b-9a44-49a8-92dc-8b7b215df324","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:48:09][352665189520798][5466 ms][DEBUG] proc_open done in 4577 ms; code=255; res.len=3343 [2025-09-06 09:48:09][352665189520798][5466 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-09-06 09:48:09][352665189520798][5466 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:48:11][352665189520798][0 ms][INFO] === Request start === [2025-09-06 09:48:11][352665189520798][1 ms][DEBUG] START check_scloud [2025-09-06 09:48:11][352665189520798][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:48:11][352665189520798][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 29708 4972 24006952 160928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:48:11][352665189520798][300 ms][DEBUG] targetPkg: running [2025-09-06 09:48:11][352665189520798][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-06 09:48:11][352665189520798][300 ms][DEBUG] START check_boot_completed [2025-09-06 09:48:11][352665189520798][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:48:11][352665189520798][346 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 09:48:11][352665189520798][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:48:11][352665189520798][439 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 09:48:11][352665189520798][440 ms][DEBUG] END check_boot_completed in 139 ms [2025-09-06 09:48:11][352665189520798][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:48:12][352665189520798][580 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4175\nsuccessfulTxPacketsPerSecond: 0.5314255157318559\nretriedTxPackets: 861\nretriedTxPacketsPerSecond: 0.1826775210328255\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3912\nsuccessfulRxPacketsPerSecond: 0.464997326265374\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:48:12][352665189520798][580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:48:12][352665189520798][924 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.334/227.334/227.334/0.000 ms\n [2025-09-06 09:48:12][352665189520798][924 ms][DEBUG] check_internet: online [2025-09-06 09:48:12][352665189520798][924 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:48:12][352665189520798][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189520798\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6814\"}'\'' -e'"" [2025-09-06 09:48:12][352665189520798][924 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:48:12][352665189520798][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189520798\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6814\"}'\'' -e'"" [2025-09-06 09:48:17][352665189520798][6032 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4bbce736-6c3e-457d-8e09-96cd3cfba045","id":"QR_4bbce736-6c3e-457d-8e09-96cd3cfba045","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:48:17][352665189520798][6188 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-06 09:48:17][352665189520798][6188 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-06 09:48:17][352665189520798][6188 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:50:03][357211248755565][1 ms][INFO] === Request start === [2025-09-06 09:50:03][357211248755565][1 ms][DEBUG] START check_scloud [2025-09-06 09:50:03][357211248755565][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:50:03][357211248755565][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 29708 4972 24115960 172924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:50:03][357211248755565][283 ms][DEBUG] targetPkg: running [2025-09-06 09:50:03][357211248755565][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-06 09:50:03][357211248755565][283 ms][DEBUG] START check_boot_completed [2025-09-06 09:50:03][357211248755565][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:50:03][357211248755565][314 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:50:03][357211248755565][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:50:04][357211248755565][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:50:04][357211248755565][361 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:50:04][357211248755565][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:50:04][357211248755565][470 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4175\nsuccessfulTxPacketsPerSecond: 0.5314255157318559\nretriedTxPackets: 861\nretriedTxPacketsPerSecond: 0.1826775210328255\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3912\nsuccessfulRxPacketsPerSecond: 0.464997326265374\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:50:04][357211248755565][471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:50:04][357211248755565][908 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.077/293.077/293.077/0.000 ms\n [2025-09-06 09:50:04][357211248755565][908 ms][DEBUG] check_internet: online [2025-09-06 09:50:04][357211248755565][908 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:50:04][357211248755565][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211248755565\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6810\"}'\'' -e'"" [2025-09-06 09:50:04][357211248755565][908 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:50:04][357211248755565][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211248755565\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6810\"}'\'' -e'"" [2025-09-06 09:50:09][357211248755565][5454 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_075e696b-dcc5-44c6-9852-639208e7e09e","id":"QR_075e696b-dcc5-44c6-9852-639208e7e09e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:50:09][357211248755565][5610 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-06 09:50:09][357211248755565][5610 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-06 09:50:09][357211248755565][5610 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:50:11][357211248755565][0 ms][INFO] === Request start === [2025-09-06 09:50:11][357211248755565][1 ms][DEBUG] START check_scloud [2025-09-06 09:50:11][357211248755565][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:50:11][357211248755565][261 ms][DEBUG] SU: done in 261 ms; outu0_a118 29708 4972 24260480 183772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:50:11][357211248755565][262 ms][DEBUG] targetPkg: running [2025-09-06 09:50:11][357211248755565][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-06 09:50:11][357211248755565][262 ms][DEBUG] START check_boot_completed [2025-09-06 09:50:11][357211248755565][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:50:11][357211248755565][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:50:11][357211248755565][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:50:11][357211248755565][388 ms][DEBUG] SU: done in 79 ms; out [2025-09-06 09:50:11][357211248755565][388 ms][DEBUG] END check_boot_completed in 126 ms [2025-09-06 09:50:11][357211248755565][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:50:12][357211248755565][543 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4175\nsuccessfulTxPacketsPerSecond: 0.5314255157318559\nretriedTxPackets: 861\nretriedTxPacketsPerSecond: 0.1826775210328255\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3912\nsuccessfulRxPacketsPerSecond: 0.464997326265374\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:50:12][357211248755565][543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:50:12][357211248755565][964 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=314 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 314.803/314.803/314.803/0.000 ms\n [2025-09-06 09:50:12][357211248755565][964 ms][DEBUG] check_internet: online [2025-09-06 09:50:12][357211248755565][964 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:50:12][357211248755565][964 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211248755565\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7200\"}'\'' -e'"" [2025-09-06 09:50:12][357211248755565][964 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:50:12][357211248755565][964 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211248755565\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7200\"}'\'' -e'"" [2025-09-06 09:50:17][357211248755565][6338 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_745ef899-70a1-4ede-bcb1-67ed40189e37","id":"QR_745ef899-70a1-4ede-bcb1-67ed40189e37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:50:18][357211248755565][6494 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-06 09:50:18][357211248755565][6494 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-06 09:50:18][357211248755565][6494 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:51:07][354484223827187][0 ms][INFO] === Request start === [2025-09-06 09:51:07][354484223827187][1 ms][DEBUG] START check_scloud [2025-09-06 09:51:07][354484223827187][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:51:07][354484223827187][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 29708 4972 24365240 195128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:51:07][354484223827187][306 ms][DEBUG] targetPkg: running [2025-09-06 09:51:07][354484223827187][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 09:51:07][354484223827187][306 ms][DEBUG] START check_boot_completed [2025-09-06 09:51:07][354484223827187][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:51:07][354484223827187][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:51:07][354484223827187][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:51:07][354484223827187][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:51:07][354484223827187][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:51:07][354484223827187][384 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:51:07][354484223827187][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484223827187\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7520\"}'\'' -e'"" [2025-09-06 09:51:07][354484223827187][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:51:07][354484223827187][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484223827187\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7520\"}'\'' -e'"" [2025-09-06 09:51:12][354484223827187][4852 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73704452-97b2-4d3e-a287-57bc5d0697ef","id":"QR_73704452-97b2-4d3e-a287-57bc5d0697ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:51:12][354484223827187][5008 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-06 09:51:12][354484223827187][5008 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-09-06 09:51:12][354484223827187][5008 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:52:03][350832442514453][0 ms][INFO] === Request start === [2025-09-06 09:52:03][350832442514453][1 ms][DEBUG] START check_scloud [2025-09-06 09:52:03][350832442514453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:52:04][350832442514453][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 29708 4972 24508828 207016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:52:04][350832442514453][306 ms][DEBUG] targetPkg: running [2025-09-06 09:52:04][350832442514453][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 09:52:04][350832442514453][306 ms][DEBUG] START check_boot_completed [2025-09-06 09:52:04][350832442514453][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:52:04][350832442514453][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:52:04][350832442514453][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:52:04][350832442514453][415 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 09:52:04][350832442514453][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:52:04][350832442514453][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:52:04][350832442514453][524 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4422\nsuccessfulTxPacketsPerSecond: 0.8201184689351078\nretriedTxPackets: 937\nretriedTxPacketsPerSecond: 0.25234414428772545\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4118\nsuccessfulRxPacketsPerSecond: 0.6839854437272558\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:52:04][350832442514453][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:52:05][350832442514453][1868 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.106/306.106/306.106/0.000 ms\n [2025-09-06 09:52:05][350832442514453][1868 ms][DEBUG] check_internet: online [2025-09-06 09:52:05][350832442514453][1868 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:52:05][350832442514453][1868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442514453\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6146\"}'\'' -e'"" [2025-09-06 09:52:05][350832442514453][1868 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:52:05][350832442514453][1868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442514453\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6146\"}'\'' -e'"" [2025-09-06 09:52:09][350832442514453][5836 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23d7a49f-5b68-4717-a623-ad248790c4fa","id":"QR_23d7a49f-5b68-4717-a623-ad248790c4fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:52:09][350832442514453][5992 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-09-06 09:52:09][350832442514453][5992 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-09-06 09:52:09][350832442514453][5992 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:52:12][350832442514453][1 ms][INFO] === Request start === [2025-09-06 09:52:12][350832442514453][1 ms][DEBUG] START check_scloud [2025-09-06 09:52:12][350832442514453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:52:12][350832442514453][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 29708 4972 24649380 217720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:52:12][350832442514453][246 ms][DEBUG] targetPkg: running [2025-09-06 09:52:12][350832442514453][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-06 09:52:12][350832442514453][246 ms][DEBUG] START check_boot_completed [2025-09-06 09:52:12][350832442514453][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:52:12][350832442514453][291 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 09:52:12][350832442514453][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:52:12][350832442514453][338 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:52:12][350832442514453][338 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 09:52:12][350832442514453][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:52:12][350832442514453][449 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4422\nsuccessfulTxPacketsPerSecond: 0.8201184689351078\nretriedTxPackets: 937\nretriedTxPacketsPerSecond: 0.25234414428772545\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4118\nsuccessfulRxPacketsPerSecond: 0.6839854437272558\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:52:12][350832442514453][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:52:12][350832442514453][838 ms][DEBUG] SU: done in 389 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.292/286.292/286.292/0.000 ms\n [2025-09-06 09:52:12][350832442514453][838 ms][DEBUG] check_internet: online [2025-09-06 09:52:12][350832442514453][838 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:52:12][350832442514453][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442514453\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6203\"}'\'' -e'"" [2025-09-06 09:52:12][350832442514453][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:52:12][350832442514453][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442514453\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6203\"}'\'' -e'"" [2025-09-06 09:52:18][350832442514453][6102 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55aea7e7-4c6e-4629-996a-a40c1cd0cbd0","id":"QR_55aea7e7-4c6e-4629-996a-a40c1cd0cbd0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:52:18][350832442514453][6259 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 09:52:18][350832442514453][6259 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-06 09:52:18][350832442514453][6259 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:52:22][352245191216543][0 ms][INFO] === Request start === [2025-09-06 09:52:22][352245191216543][1 ms][DEBUG] START check_scloud [2025-09-06 09:52:22][352245191216543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:52:22][352245191216543][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 29708 4972 24825892 229292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:52:22][352245191216543][293 ms][DEBUG] targetPkg: running [2025-09-06 09:52:22][352245191216543][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-06 09:52:22][352245191216543][293 ms][DEBUG] START check_boot_completed [2025-09-06 09:52:22][352245191216543][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:52:22][352245191216543][323 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 09:52:22][352245191216543][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:52:22][352245191216543][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:52:22][352245191216543][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:52:22][352245191216543][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:52:23][352245191216543][480 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4422\nsuccessfulTxPacketsPerSecond: 0.8201184689351078\nretriedTxPackets: 937\nretriedTxPacketsPerSecond: 0.25234414428772545\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4118\nsuccessfulRxPacketsPerSecond: 0.6839854437272558\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:52:23][352245191216543][480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:52:23][352245191216543][870 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=279 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 279.132/279.132/279.132/0.000 ms\n [2025-09-06 09:52:23][352245191216543][871 ms][DEBUG] check_internet: online [2025-09-06 09:52:23][352245191216543][871 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:52:23][352245191216543][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352245191216543\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6578\"}'\'' -e'"" [2025-09-06 09:52:23][352245191216543][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:52:23][352245191216543][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352245191216543\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6578\"}'\'' -e'"" [2025-09-06 09:52:26][352245191216543][4354 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2076b902-8e85-4083-a6ce-ea9b6b515816","id":"QR_2076b902-8e85-4083-a6ce-ea9b6b515816","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:52:27][352245191216543][4510 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-06 09:52:27][352245191216543][4510 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-06 09:52:27][352245191216543][4510 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:52:29][352245191216543][0 ms][INFO] === Request start === [2025-09-06 09:52:29][352245191216543][1 ms][DEBUG] START check_scloud [2025-09-06 09:52:29][352245191216543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:52:29][352245191216543][249 ms][DEBUG] SU: done in 249 ms; outu0_a118 29708 4972 24929420 241112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:52:29][352245191216543][250 ms][DEBUG] targetPkg: running [2025-09-06 09:52:29][352245191216543][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-06 09:52:29][352245191216543][250 ms][DEBUG] START check_boot_completed [2025-09-06 09:52:29][352245191216543][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:52:29][352245191216543][295 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 09:52:29][352245191216543][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:52:29][352245191216543][341 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:52:29][352245191216543][341 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 09:52:29][352245191216543][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 09:52:29][352245191216543][451 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4422\nsuccessfulTxPacketsPerSecond: 0.8201184689351078\nretriedTxPackets: 937\nretriedTxPacketsPerSecond: 0.25234414428772545\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4118\nsuccessfulRxPacketsPerSecond: 0.6839854437272558\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 09:52:29][352245191216543][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 09:52:30][352245191216543][779 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.32.46) 56(84) bytes of data.\n64 bytes from sfo03s26-in-f14.1e100.net (142.251.32.46): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.642/227.642/227.642/0.000 ms\n [2025-09-06 09:52:30][352245191216543][779 ms][DEBUG] check_internet: online [2025-09-06 09:52:30][352245191216543][779 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:52:30][352245191216543][779 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352245191216543\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9423\"}'\'' -e'"" [2025-09-06 09:52:30][352245191216543][779 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:52:30][352245191216543][779 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352245191216543\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9423\"}'\'' -e'"" [2025-09-06 09:52:33][352245191216543][4528 ms][DEBUG] proc_open done in 3748 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 09:52:33][352245191216543][4528 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-06 09:52:33][352245191216543][4528 ms][WARN] Detected error: Process with pid 29708 either refused to load frida-agent, or terminated during injectionProcess with pid 29708 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 09:52:33][352245191216543][4528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 09:52:34][352245191216543][4793 ms][DEBUG] SU: done in 265 ms; outsystem 5389 4972 12784564 177780 ep_poll 0 S system_server\n [2025-09-06 09:52:34][352245191216543][4793 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 09:52:34][352245191216543][4918 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 09:52:34][352245191216543][4918 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 09:52:34][352245191216543][4918 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 09:52:34][352245191216543][5043 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 09:52:34][352245191216543][5044 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 09:52:34][352245191216543][5200 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 09:52:36][352245191216543][7215 ms][DEBUG] START check_boot_completed [2025-09-06 09:52:36][352245191216543][7215 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:52:36][352245191216543][7262 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:52:36][352245191216543][7262 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:52:36][352245191216543][7324 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 09:52:36][352245191216543][7324 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:52:39][352245191216543][10339 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 09:52:39][352245191216543][10339 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352245191216543\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9423\"}'\'' -e'"" [2025-09-06 09:52:44][352245191216543][15307 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6cae6292-98d6-4592-aa75-a37169073dd8","id":"QR_6cae6292-98d6-4592-aa75-a37169073dd8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:52:44][352245191216543][15463 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-06 09:52:44][352245191216543][15463 ms][DEBUG] END runCmdUntilRes#2 in 5124 ms [2025-09-06 09:52:44][352245191216543][15463 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:53:03][350490940442774][0 ms][INFO] === Request start === [2025-09-06 09:53:03][350490940442774][1 ms][DEBUG] START check_scloud [2025-09-06 09:53:03][350490940442774][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:53:03][350490940442774][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 31204 4972 23659080 127220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:53:03][350490940442774][300 ms][DEBUG] targetPkg: running [2025-09-06 09:53:03][350490940442774][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 09:53:03][350490940442774][300 ms][DEBUG] START check_boot_completed [2025-09-06 09:53:03][350490940442774][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:53:03][350490940442774][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 09:53:03][350490940442774][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:53:03][350490940442774][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:53:03][350490940442774][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:53:03][350490940442774][378 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:53:03][350490940442774][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940442774\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3478\"}'\'' -e'"" [2025-09-06 09:53:03][350490940442774][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:53:03][350490940442774][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940442774\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3478\"}'\'' -e'"" [2025-09-06 09:53:06][350490940442774][3736 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f172716-a098-4a68-8079-662401ea406e","id":"QR_4f172716-a098-4a68-8079-662401ea406e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:53:07][350490940442774][3893 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-06 09:53:07][350490940442774][3893 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-06 09:53:07][350490940442774][3893 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:53:09][350490940442774][0 ms][INFO] === Request start === [2025-09-06 09:53:09][350490940442774][0 ms][DEBUG] START check_scloud [2025-09-06 09:53:09][350490940442774][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:53:09][350490940442774][286 ms][DEBUG] SU: done in 286 ms; outu0_a118 31204 4972 23768416 138220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:53:09][350490940442774][286 ms][DEBUG] targetPkg: running [2025-09-06 09:53:09][350490940442774][286 ms][DEBUG] END check_scloud in 286 ms [2025-09-06 09:53:09][350490940442774][286 ms][DEBUG] START check_boot_completed [2025-09-06 09:53:09][350490940442774][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:53:09][350490940442774][333 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:53:09][350490940442774][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:53:09][350490940442774][395 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 09:53:09][350490940442774][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:53:09][350490940442774][395 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:53:09][350490940442774][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940442774\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9379\"}'\'' -e'"" [2025-09-06 09:53:09][350490940442774][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:53:09][350490940442774][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940442774\",\"model\":\"SM-A156E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9379\"}'\'' -e'"" [2025-09-06 09:53:14][350490940442774][5316 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d56d019a-006b-44b3-8482-b87f2822a7ff","id":"QR_d56d019a-006b-44b3-8482-b87f2822a7ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:53:14][350490940442774][5472 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-06 09:53:14][350490940442774][5472 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-06 09:53:14][350490940442774][5472 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:59:03][352677530662773][1 ms][INFO] === Request start === [2025-09-06 09:59:03][352677530662773][1 ms][DEBUG] START check_scloud [2025-09-06 09:59:03][352677530662773][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:59:03][352677530662773][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 31204 4972 23869872 150004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:59:03][352677530662773][250 ms][DEBUG] targetPkg: running [2025-09-06 09:59:03][352677530662773][251 ms][DEBUG] END check_scloud in 249 ms [2025-09-06 09:59:03][352677530662773][251 ms][DEBUG] START check_boot_completed [2025-09-06 09:59:03][352677530662773][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:59:03][352677530662773][281 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 09:59:03][352677530662773][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:59:03][352677530662773][328 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 09:59:03][352677530662773][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 09:59:03][352677530662773][329 ms][DEBUG] rawBody.length=1150 [2025-09-06 09:59:03][352677530662773][329 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530662773\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9109\"}'\'' -e'"" [2025-09-06 09:59:03][352677530662773][329 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:59:03][352677530662773][329 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530662773\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9109\"}'\'' -e'"" [2025-09-06 09:59:08][352677530662773][5062 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6f55a3b-d824-4700-a4e9-3a6215c265ef","id":"QR_c6f55a3b-d824-4700-a4e9-3a6215c265ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:59:08][352677530662773][5218 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 09:59:08][352677530662773][5218 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 09:59:08][352677530662773][5218 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 09:59:11][352677530662773][0 ms][INFO] === Request start === [2025-09-06 09:59:11][352677530662773][1 ms][DEBUG] START check_scloud [2025-09-06 09:59:11][352677530662773][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 09:59:11][352677530662773][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 31204 4972 24007472 161392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 09:59:11][352677530662773][308 ms][DEBUG] targetPkg: running [2025-09-06 09:59:11][352677530662773][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 09:59:11][352677530662773][308 ms][DEBUG] START check_boot_completed [2025-09-06 09:59:11][352677530662773][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 09:59:11][352677530662773][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 09:59:11][352677530662773][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 09:59:11][352677530662773][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 09:59:11][352677530662773][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 09:59:11][352677530662773][417 ms][DEBUG] rawBody.length=1160 [2025-09-06 09:59:11][352677530662773][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530662773\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2948\"}'\'' -e'"" [2025-09-06 09:59:11][352677530662773][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 09:59:11][352677530662773][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530662773\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2948\"}'\'' -e'"" [2025-09-06 09:59:16][352677530662773][5462 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b6742d11-4435-4015-a7a6-53f95e770d2d","id":"QR_b6742d11-4435-4015-a7a6-53f95e770d2d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 09:59:16][352677530662773][5618 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-06 09:59:16][352677530662773][5618 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-06 09:59:16][352677530662773][5618 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:00:03][351398413185672][0 ms][INFO] === Request start === [2025-09-06 10:00:03][351398413185672][1 ms][DEBUG] START check_scloud [2025-09-06 10:00:03][351398413185672][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:00:03][351398413185672][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 31204 4972 24109104 172484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:00:03][351398413185672][270 ms][DEBUG] targetPkg: running [2025-09-06 10:00:03][351398413185672][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-06 10:00:03][351398413185672][270 ms][DEBUG] START check_boot_completed [2025-09-06 10:00:03][351398413185672][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:00:03][351398413185672][317 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:00:03][351398413185672][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:00:03][351398413185672][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:00:03][351398413185672][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 10:00:03][351398413185672][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:00:03][351398413185672][473 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4637\nsuccessfulTxPacketsPerSecond: 0.17586691239172975\nretriedTxPackets: 1005\nretriedTxPacketsPerSecond: 0.06595009214689865\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4294\nsuccessfulRxPacketsPerSecond: 0.14014394581215964\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:00:03][351398413185672][473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:00:04][351398413185672][1176 ms][DEBUG] SU: done in 703 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.936/303.936/303.936/0.000 ms\n [2025-09-06 10:00:04][351398413185672][1176 ms][DEBUG] check_internet: online [2025-09-06 10:00:04][351398413185672][1176 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:00:04][351398413185672][1176 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351398413185672\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2718\"}'\'' -e'"" [2025-09-06 10:00:04][351398413185672][1177 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:00:04][351398413185672][1177 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351398413185672\",\"model\":\"SM-A065F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2718\"}'\'' -e'"" [2025-09-06 10:00:08][351398413185672][4956 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4cb3ba01-9f60-40ef-8937-07f997758177","id":"QR_4cb3ba01-9f60-40ef-8937-07f997758177","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:00:08][351398413185672][5112 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-06 10:00:08][351398413185672][5112 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-09-06 10:00:08][351398413185672][5112 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:01:03][352397452313681][0 ms][INFO] === Request start === [2025-09-06 10:01:03][352397452313681][1 ms][DEBUG] START check_scloud [2025-09-06 10:01:03][352397452313681][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:01:03][352397452313681][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 31204 4972 24272084 184440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:01:03][352397452313681][279 ms][DEBUG] targetPkg: running [2025-09-06 10:01:03][352397452313681][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-06 10:01:03][352397452313681][279 ms][DEBUG] START check_boot_completed [2025-09-06 10:01:03][352397452313681][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:01:03][352397452313681][310 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:01:03][352397452313681][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:01:03][352397452313681][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:01:03][352397452313681][357 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:01:03][352397452313681][357 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:01:03][352397452313681][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452313681\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4171\"}'\'' -e'"" [2025-09-06 10:01:03][352397452313681][357 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:01:03][352397452313681][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452313681\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4171\"}'\'' -e'"" [2025-09-06 10:01:08][352397452313681][5231 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03a77b0e-6164-4432-8d57-0d69374b661c","id":"QR_03a77b0e-6164-4432-8d57-0d69374b661c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:01:08][352397452313681][5387 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-06 10:01:08][352397452313681][5387 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-06 10:01:08][352397452313681][5387 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:01:11][352397452313681][1 ms][INFO] === Request start === [2025-09-06 10:01:11][352397452313681][1 ms][DEBUG] START check_scloud [2025-09-06 10:01:11][352397452313681][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:01:11][352397452313681][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 31204 4972 24424860 195448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:01:11][352397452313681][303 ms][DEBUG] targetPkg: running [2025-09-06 10:01:11][352397452313681][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 10:01:11][352397452313681][303 ms][DEBUG] START check_boot_completed [2025-09-06 10:01:11][352397452313681][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:01:11][352397452313681][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:01:11][352397452313681][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:01:11][352397452313681][428 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 10:01:11][352397452313681][428 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 10:01:11][352397452313681][428 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:01:11][352397452313681][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452313681\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6268\"}'\'' -e'"" [2025-09-06 10:01:11][352397452313681][428 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:01:11][352397452313681][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452313681\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6268\"}'\'' -e'"" [2025-09-06 10:01:16][352397452313681][5708 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d198f14-e68c-4529-b1a7-bb4d70855768","id":"QR_3d198f14-e68c-4529-b1a7-bb4d70855768","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:01:17][352397452313681][5864 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-09-06 10:01:17][352397452313681][5864 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-09-06 10:01:17][352397452313681][5864 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:03:03][351828113950926][0 ms][INFO] === Request start === [2025-09-06 10:03:03][351828113950926][1 ms][DEBUG] START check_scloud [2025-09-06 10:03:03][351828113950926][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:03:03][351828113950926][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 31204 4972 24567260 207416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:03:03][351828113950926][300 ms][DEBUG] targetPkg: running [2025-09-06 10:03:03][351828113950926][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 10:03:03][351828113950926][300 ms][DEBUG] START check_boot_completed [2025-09-06 10:03:03][351828113950926][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:03:03][351828113950926][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:03:03][351828113950926][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:03:03][351828113950926][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:03:03][351828113950926][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:03:03][351828113950926][409 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:03:03][351828113950926][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828113950926\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4627\"}'\'' -e'"" [2025-09-06 10:03:03][351828113950926][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:03:03][351828113950926][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828113950926\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4627\"}'\'' -e'"" [2025-09-06 10:03:08][351828113950926][4813 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afab558b-1235-4134-b42d-3db06c7893c2","id":"QR_afab558b-1235-4134-b42d-3db06c7893c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:03:08][351828113950926][4970 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-09-06 10:03:08][351828113950926][4970 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-09-06 10:03:08][351828113950926][4970 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:03:10][351828113950926][0 ms][INFO] === Request start === [2025-09-06 10:03:10][351828113950926][1 ms][DEBUG] START check_scloud [2025-09-06 10:03:10][351828113950926][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:03:11][351828113950926][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 31204 4972 24748772 218384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:03:11][351828113950926][291 ms][DEBUG] targetPkg: running [2025-09-06 10:03:11][351828113950926][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-06 10:03:11][351828113950926][291 ms][DEBUG] START check_boot_completed [2025-09-06 10:03:11][351828113950926][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:03:11][351828113950926][338 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:03:11][351828113950926][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:03:11][351828113950926][400 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 10:03:11][351828113950926][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:03:11][351828113950926][400 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:03:11][351828113950926][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828113950926\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3018\"}'\'' -e'"" [2025-09-06 10:03:11][351828113950926][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:03:11][351828113950926][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828113950926\",\"model\":\"SM-G988B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3018\"}'\'' -e'"" [2025-09-06 10:03:16][351828113950926][6039 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5eb71d60-ef10-440d-ac34-23fa094636cc","id":"QR_5eb71d60-ef10-440d-ac34-23fa094636cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:03:17][351828113950926][6196 ms][DEBUG] proc_open done in 5795 ms; code=255; res.len=3343 [2025-09-06 10:03:17][351828113950926][6196 ms][DEBUG] END runCmdUntilRes#1 in 5795 ms [2025-09-06 10:03:17][351828113950926][6196 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:07:03][351240642070665][1 ms][INFO] === Request start === [2025-09-06 10:07:03][351240642070665][1 ms][DEBUG] START check_scloud [2025-09-06 10:07:03][351240642070665][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:07:03][351240642070665][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 31204 4972 24858532 230496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:07:03][351240642070665][288 ms][DEBUG] targetPkg: running [2025-09-06 10:07:03][351240642070665][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-06 10:07:03][351240642070665][288 ms][DEBUG] START check_boot_completed [2025-09-06 10:07:03][351240642070665][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:07:03][351240642070665][318 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 10:07:03][351240642070665][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:07:03][351240642070665][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:07:03][351240642070665][365 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:07:03][351240642070665][366 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:07:03][351240642070665][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642070665\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8768\"}'\'' -e'"" [2025-09-06 10:07:03][351240642070665][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:07:03][351240642070665][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642070665\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8768\"}'\'' -e'"" [2025-09-06 10:07:08][351240642070665][4724 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50c6483f-c47c-4722-9ba8-0769c1eaf105","id":"QR_50c6483f-c47c-4722-9ba8-0769c1eaf105","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:07:08][351240642070665][4880 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-06 10:07:08][351240642070665][4880 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-09-06 10:07:08][351240642070665][4880 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:07:10][351240642070665][0 ms][INFO] === Request start === [2025-09-06 10:07:10][351240642070665][0 ms][DEBUG] START check_scloud [2025-09-06 10:07:10][351240642070665][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:07:10][351240642070665][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 31204 4972 25011244 241220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:07:10][351240642070665][307 ms][DEBUG] targetPkg: running [2025-09-06 10:07:10][351240642070665][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 10:07:10][351240642070665][307 ms][DEBUG] START check_boot_completed [2025-09-06 10:07:10][351240642070665][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:07:10][351240642070665][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:07:10][351240642070665][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:07:10][351240642070665][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:07:10][351240642070665][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:07:10][351240642070665][385 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:07:10][351240642070665][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642070665\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6522\"}'\'' -e'"" [2025-09-06 10:07:10][351240642070665][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:07:10][351240642070665][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642070665\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6522\"}'\'' -e'"" [2025-09-06 10:07:14][351240642070665][4244 ms][DEBUG] proc_open done in 3859 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 10:07:14][351240642070665][4244 ms][DEBUG] END runCmdUntilRes#1 in 3859 ms [2025-09-06 10:07:14][351240642070665][4244 ms][WARN] Detected error: Process with pid 31204 either refused to load frida-agent, or terminated during injectionProcess with pid 31204 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 10:07:14][351240642070665][4244 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 10:07:14][351240642070665][4494 ms][DEBUG] SU: done in 250 ms; outsystem 5389 4972 12784564 169240 ep_poll 0 S system_server\n [2025-09-06 10:07:14][351240642070665][4494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 10:07:15][351240642070665][4634 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 10:07:15][351240642070665][4634 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 10:07:15][351240642070665][4634 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 10:07:15][351240642070665][4745 ms][DEBUG] SU: done in 111 ms; out [2025-09-06 10:07:15][351240642070665][4745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 10:07:15][351240642070665][4947 ms][DEBUG] SU: done in 202 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 10:07:17][351240642070665][6962 ms][DEBUG] START check_boot_completed [2025-09-06 10:07:17][351240642070665][6962 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:07:17][351240642070665][7009 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:07:17][351240642070665][7009 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:07:17][351240642070665][7071 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:07:17][351240642070665][7071 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:07:20][351240642070665][10086 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 10:07:20][351240642070665][10086 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642070665\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6522\"}'\'' -e'"" [2025-09-06 10:07:25][351240642070665][15101 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af7c7747-72bb-4abb-9f66-b37317aef528","id":"QR_af7c7747-72bb-4abb-9f66-b37317aef528","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:07:25][351240642070665][15257 ms][DEBUG] proc_open done in 5171 ms; code=255; res.len=3343 [2025-09-06 10:07:25][351240642070665][15257 ms][DEBUG] END runCmdUntilRes#2 in 5171 ms [2025-09-06 10:07:25][351240642070665][15257 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:08:03][350361081762199][1 ms][INFO] === Request start === [2025-09-06 10:08:03][350361081762199][1 ms][DEBUG] START check_scloud [2025-09-06 10:08:03][350361081762199][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:08:03][350361081762199][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 32739 4972 23598900 127568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:08:03][350361081762199][272 ms][DEBUG] targetPkg: running [2025-09-06 10:08:03][350361081762199][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-06 10:08:03][350361081762199][272 ms][DEBUG] START check_boot_completed [2025-09-06 10:08:03][350361081762199][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:08:03][350361081762199][317 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 10:08:03][350361081762199][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:08:03][350361081762199][380 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 10:08:03][350361081762199][380 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 10:08:03][350361081762199][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:08:03][350361081762199][505 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4866\nsuccessfulTxPacketsPerSecond: 0.7617742353982183\nretriedTxPackets: 1056\nretriedTxPacketsPerSecond: 0.16965277731576042\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4505\nsuccessfulRxPacketsPerSecond: 0.7018967845808911\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:08:03][350361081762199][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:08:05][350361081762199][1895 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.867/299.867/299.867/0.000 ms\n [2025-09-06 10:08:05][350361081762199][1895 ms][DEBUG] check_internet: online [2025-09-06 10:08:05][350361081762199][1895 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:08:05][350361081762199][1895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361081762199\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2117\"}'\'' -e'"" [2025-09-06 10:08:05][350361081762199][1895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:08:05][350361081762199][1895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361081762199\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2117\"}'\'' -e'"" [2025-09-06 10:08:09][350361081762199][5737 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb824f15-ef38-4fe5-ba0b-9bc4d33c5963","id":"QR_cb824f15-ef38-4fe5-ba0b-9bc4d33c5963","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:08:09][350361081762199][5894 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-06 10:08:09][350361081762199][5894 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-09-06 10:08:09][350361081762199][5894 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:08:11][350361081762199][0 ms][INFO] === Request start === [2025-09-06 10:08:11][350361081762199][1 ms][DEBUG] START check_scloud [2025-09-06 10:08:11][350361081762199][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:08:11][350361081762199][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 32739 4972 23779196 138208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:08:11][350361081762199][299 ms][DEBUG] targetPkg: running [2025-09-06 10:08:11][350361081762199][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 10:08:11][350361081762199][299 ms][DEBUG] START check_boot_completed [2025-09-06 10:08:11][350361081762199][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:08:11][350361081762199][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:08:11][350361081762199][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:08:11][350361081762199][440 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 10:08:11][350361081762199][440 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 10:08:11][350361081762199][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:08:12][350361081762199][565 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4866\nsuccessfulTxPacketsPerSecond: 0.7617742353982183\nretriedTxPackets: 1056\nretriedTxPacketsPerSecond: 0.16965277731576042\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4505\nsuccessfulRxPacketsPerSecond: 0.7018967845808911\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:08:12][350361081762199][565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:08:12][350361081762199][893 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.990/227.990/227.990/0.000 ms\n [2025-09-06 10:08:12][350361081762199][893 ms][DEBUG] check_internet: online [2025-09-06 10:08:12][350361081762199][893 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:08:12][350361081762199][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361081762199\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6650\"}'\'' -e'"" [2025-09-06 10:08:12][350361081762199][893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:08:12][350361081762199][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350361081762199\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6650\"}'\'' -e'"" [2025-09-06 10:08:17][350361081762199][5735 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_455dea76-3958-465c-90f8-d8703a938a2b","id":"QR_455dea76-3958-465c-90f8-d8703a938a2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:08:17][350361081762199][5891 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-06 10:08:17][350361081762199][5891 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-06 10:08:17][350361081762199][5891 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:14:07][351642480141948][1 ms][INFO] === Request start === [2025-09-06 10:14:07][351642480141948][1 ms][DEBUG] START check_scloud [2025-09-06 10:14:07][351642480141948][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:14:07][351642480141948][252 ms][DEBUG] SU: done in 250 ms; outu0_a118 32739 4972 23905100 150612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:14:07][351642480141948][252 ms][DEBUG] targetPkg: running [2025-09-06 10:14:07][351642480141948][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-06 10:14:07][351642480141948][252 ms][DEBUG] START check_boot_completed [2025-09-06 10:14:07][351642480141948][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:14:07][351642480141948][298 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:14:07][351642480141948][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:14:07][351642480141948][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:14:07][351642480141948][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 10:14:07][351642480141948][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:14:07][351642480141948][456 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30596 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5004\nsuccessfulTxPacketsPerSecond: 0.45818862762545404\nretriedTxPackets: 1112\nretriedTxPacketsPerSecond: 0.18593161700743063\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4610\nsuccessfulRxPacketsPerSecond: 0.34862178188893245\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:14:07][351642480141948][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:14:08][351642480141948][1814 ms][DEBUG] SU: done in 1358 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=289 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 289.925/289.925/289.925/0.000 ms\n [2025-09-06 10:14:08][351642480141948][1814 ms][DEBUG] check_internet: online [2025-09-06 10:14:08][351642480141948][1814 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:14:08][351642480141948][1814 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642480141948\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9927\"}'\'' -e'"" [2025-09-06 10:14:08][351642480141948][1814 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:14:08][351642480141948][1814 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642480141948\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9927\"}'\'' -e'"" [2025-09-06 10:14:13][351642480141948][6562 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80accf7c-fe9c-4064-9ffe-b4fd07be6014","id":"QR_80accf7c-fe9c-4064-9ffe-b4fd07be6014","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:14:13][351642480141948][6719 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 10:14:13][351642480141948][6719 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 10:14:13][351642480141948][6719 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:15:04][357829461465552][0 ms][INFO] === Request start === [2025-09-06 10:15:04][357829461465552][1 ms][DEBUG] START check_scloud [2025-09-06 10:15:04][357829461465552][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:15:05][357829461465552][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 32739 4972 24027120 161616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:15:05][357829461465552][311 ms][DEBUG] targetPkg: running [2025-09-06 10:15:05][357829461465552][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 10:15:05][357829461465552][311 ms][DEBUG] START check_boot_completed [2025-09-06 10:15:05][357829461465552][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:15:05][357829461465552][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:15:05][357829461465552][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:15:05][357829461465552][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:15:05][357829461465552][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:15:05][357829461465552][421 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:15:05][357829461465552][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357829461465552\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8668\"}'\'' -e'"" [2025-09-06 10:15:05][357829461465552][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:15:05][357829461465552][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357829461465552\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8668\"}'\'' -e'"" [2025-09-06 10:15:10][357829461465552][5404 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_853ed77f-81cf-43c7-906b-5572dad82189","id":"QR_853ed77f-81cf-43c7-906b-5572dad82189","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:15:10][357829461465552][5560 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-06 10:15:10][357829461465552][5560 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-06 10:15:10][357829461465552][5560 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:15:13][357829461465552][0 ms][INFO] === Request start === [2025-09-06 10:15:13][357829461465552][1 ms][DEBUG] START check_scloud [2025-09-06 10:15:13][357829461465552][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:15:14][357829461465552][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 32739 4972 24189944 172272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:15:14][357829461465552][315 ms][DEBUG] targetPkg: running [2025-09-06 10:15:14][357829461465552][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 10:15:14][357829461465552][316 ms][DEBUG] START check_boot_completed [2025-09-06 10:15:14][357829461465552][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:15:14][357829461465552][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:15:14][357829461465552][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:15:14][357829461465552][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:15:14][357829461465552][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:15:14][357829461465552][425 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:15:14][357829461465552][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357829461465552\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6410\"}'\'' -e'"" [2025-09-06 10:15:14][357829461465552][425 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:15:14][357829461465552][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357829461465552\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6410\"}'\'' -e'"" [2025-09-06 10:15:18][357829461465552][5033 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3613b8b9-7add-455c-9994-5f811876897f","id":"QR_3613b8b9-7add-455c-9994-5f811876897f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:15:18][357829461465552][5189 ms][DEBUG] proc_open done in 4763 ms; code=255; res.len=3343 [2025-09-06 10:15:18][357829461465552][5189 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-06 10:15:18][357829461465552][5189 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:19:03][350471127772001][1 ms][INFO] === Request start === [2025-09-06 10:19:03][350471127772001][1 ms][DEBUG] START check_scloud [2025-09-06 10:19:03][350471127772001][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:19:03][350471127772001][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 32739 4972 24279096 184152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:19:03][350471127772001][302 ms][DEBUG] targetPkg: running [2025-09-06 10:19:03][350471127772001][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 10:19:03][350471127772001][302 ms][DEBUG] START check_boot_completed [2025-09-06 10:19:03][350471127772001][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:19:03][350471127772001][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:19:03][350471127772001][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:19:03][350471127772001][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:19:03][350471127772001][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:19:03][350471127772001][380 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:19:03][350471127772001][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471127772001\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3797\"}'\'' -e'"" [2025-09-06 10:19:03][350471127772001][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:19:03][350471127772001][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471127772001\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3797\"}'\'' -e'"" [2025-09-06 10:19:08][350471127772001][4988 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aed97fe8-35e6-4095-9356-69fddb3fb44f","id":"QR_aed97fe8-35e6-4095-9356-69fddb3fb44f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:19:08][350471127772001][5145 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-06 10:19:08][350471127772001][5145 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-06 10:19:08][350471127772001][5145 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:19:10][350471127772001][0 ms][INFO] === Request start === [2025-09-06 10:19:10][350471127772001][1 ms][DEBUG] START check_scloud [2025-09-06 10:19:10][350471127772001][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:19:11][350471127772001][284 ms][DEBUG] SU: done in 284 ms; outu0_a118 32739 4972 24443320 195148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:19:11][350471127772001][285 ms][DEBUG] targetPkg: running [2025-09-06 10:19:11][350471127772001][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-06 10:19:11][350471127772001][285 ms][DEBUG] START check_boot_completed [2025-09-06 10:19:11][350471127772001][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:19:11][350471127772001][331 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:19:11][350471127772001][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:19:11][350471127772001][394 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 10:19:11][350471127772001][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:19:11][350471127772001][394 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:19:11][350471127772001][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471127772001\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4014\"}'\'' -e'"" [2025-09-06 10:19:11][350471127772001][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:19:11][350471127772001][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471127772001\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4014\"}'\'' -e'"" [2025-09-06 10:19:16][350471127772001][6158 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d58d78c-5a75-4887-8c81-dbc28db61f4a","id":"QR_3d58d78c-5a75-4887-8c81-dbc28db61f4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:19:17][350471127772001][6314 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-06 10:19:17][350471127772001][6314 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-09-06 10:19:17][350471127772001][6315 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:19:21][357712351371041][0 ms][INFO] === Request start === [2025-09-06 10:19:21][357712351371041][1 ms][DEBUG] START check_scloud [2025-09-06 10:19:21][357712351371041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:19:21][357712351371041][572 ms][DEBUG] SU: done in 571 ms; out [2025-09-06 10:19:21][357712351371041][572 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 10:19:21][357712351371041][617 ms][DEBUG] ADB: done in 45 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 10:19:21][357712351371041][617 ms][DEBUG] check_devices: device found [2025-09-06 10:19:21][357712351371041][617 ms][WARN] targetPkg: not running, restarting [2025-09-06 10:19:21][357712351371041][617 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 10:19:22][357712351371041][851 ms][DEBUG] SU: done in 234 ms; out [2025-09-06 10:19:22][357712351371041][851 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 10:19:22][357712351371041][1101 ms][DEBUG] SU: done in 250 ms; out [2025-09-06 10:19:24][357712351371041][3116 ms][DEBUG] END check_scloud in 3115 ms [2025-09-06 10:19:24][357712351371041][3116 ms][DEBUG] START check_boot_completed [2025-09-06 10:19:24][357712351371041][3116 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:19:24][357712351371041][3163 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:19:24][357712351371041][3163 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:19:24][357712351371041][3226 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:19:24][357712351371041][3226 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 10:19:24][357712351371041][3226 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:19:24][357712351371041][3226 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351371041\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5778\"}'\'' -e'"" [2025-09-06 10:19:24][357712351371041][3226 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:19:24][357712351371041][3226 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351371041\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5778\"}'\'' -e'"" [2025-09-06 10:19:24][357712351371041][3694 ms][DEBUG] proc_open done in 468 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-06 10:19:24][357712351371041][3695 ms][DEBUG] END runCmdUntilRes#1 in 469 ms [2025-09-06 10:19:24][357712351371041][3695 ms][WARN] Detected system_server; Reboot the device Unable to find process with name 'system_server'Unable to find process with name 'system_server'\r\n [2025-09-06 10:19:24][357712351371041][3695 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 10:19:25][357712351371041][3929 ms][DEBUG] SU: done in 234 ms; out [2025-09-06 10:19:25][357712351371041][3929 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-06 10:19:25][357712351371041][4631 ms][DEBUG] SU: done in 703 ms; out [2025-09-06 10:20:04][357712351371041][0 ms][INFO] === Request start === [2025-09-06 10:20:04][357712351371041][1 ms][DEBUG] START check_scloud [2025-09-06 10:20:04][357712351371041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:20:04][357712351371041][34 ms][DEBUG] SU: done in 34 ms; out [2025-09-06 10:20:04][357712351371041][34 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 10:20:04][357712351371041][66 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 10:20:04][357712351371041][66 ms][WARN] check_devices: no device [2025-09-06 10:20:04][357712351371041][66 ms][WARN] check_devices: no device [2025-09-06 10:20:04][357712351371041][66 ms][DEBUG] END check_scloud in 65 ms [2025-09-06 10:21:03][357712351371041][0 ms][INFO] === Request start === [2025-09-06 10:21:03][357712351371041][1 ms][DEBUG] START check_scloud [2025-09-06 10:21:03][357712351371041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:21:04][357712351371041][486 ms][DEBUG] SU: done in 485 ms; out [2025-09-06 10:21:04][357712351371041][486 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 10:21:04][357712351371041][533 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 10:21:04][357712351371041][533 ms][DEBUG] check_devices: device found [2025-09-06 10:21:04][357712351371041][533 ms][WARN] targetPkg: not running, restarting [2025-09-06 10:21:04][357712351371041][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 10:21:04][357712351371041][720 ms][DEBUG] SU: done in 187 ms; out [2025-09-06 10:21:04][357712351371041][720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 10:21:04][357712351371041][1001 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 10:21:06][357712351371041][3016 ms][DEBUG] END check_scloud in 3016 ms [2025-09-06 10:21:06][357712351371041][3016 ms][DEBUG] START check_boot_completed [2025-09-06 10:21:06][357712351371041][3017 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:21:06][357712351371041][3063 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:21:06][357712351371041][3064 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:21:06][357712351371041][3157 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 10:21:06][357712351371041][3157 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-06 10:21:06][357712351371041][3157 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:21:06][357712351371041][3157 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351371041\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3316\"}'\'' -e'"" [2025-09-06 10:21:06][357712351371041][3158 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:21:06][357712351371041][3158 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351371041\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3316\"}'\'' -e'"" [2025-09-06 10:21:13][357712351371041][9546 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6be83cb3-0bda-4578-9a5b-d3953888fcf2","id":"QR_6be83cb3-0bda-4578-9a5b-d3953888fcf2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:21:13][357712351371041][9702 ms][DEBUG] proc_open done in 6544 ms; code=255; res.len=3343 [2025-09-06 10:21:13][357712351371041][9703 ms][DEBUG] END runCmdUntilRes#1 in 6545 ms [2025-09-06 10:21:13][357712351371041][9703 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:21:15][357712351371041][1 ms][INFO] === Request start === [2025-09-06 10:21:15][357712351371041][1 ms][DEBUG] START check_scloud [2025-09-06 10:21:15][357712351371041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:21:15][357712351371041][357 ms][DEBUG] SU: done in 356 ms; outu0_a118 10948 4975 24011236 116228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:21:15][357712351371041][357 ms][DEBUG] targetPkg: running [2025-09-06 10:21:15][357712351371041][357 ms][DEBUG] END check_scloud in 356 ms [2025-09-06 10:21:15][357712351371041][357 ms][DEBUG] START check_boot_completed [2025-09-06 10:21:15][357712351371041][357 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:21:15][357712351371041][404 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:21:15][357712351371041][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:21:16][357712351371041][466 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 10:21:16][357712351371041][466 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:21:16][357712351371041][466 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:21:16][357712351371041][467 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351371041\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1325\"}'\'' -e'"" [2025-09-06 10:21:16][357712351371041][467 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:21:16][357712351371041][467 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351371041\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1325\"}'\'' -e'"" [2025-09-06 10:21:22][357712351371041][6465 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c97d2a5-3595-49a4-851a-d6413e1fdced","id":"QR_0c97d2a5-3595-49a4-851a-d6413e1fdced","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:21:22][357712351371041][6621 ms][DEBUG] proc_open done in 6154 ms; code=255; res.len=3343 [2025-09-06 10:21:22][357712351371041][6621 ms][DEBUG] END runCmdUntilRes#1 in 6154 ms [2025-09-06 10:21:22][357712351371041][6621 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:24:03][357211241591595][1 ms][INFO] === Request start === [2025-09-06 10:24:03][357211241591595][1 ms][DEBUG] START check_scloud [2025-09-06 10:24:03][357211241591595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:24:03][357211241591595][360 ms][DEBUG] SU: done in 359 ms; outu0_a118 10948 4975 24072400 72444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:24:03][357211241591595][360 ms][DEBUG] targetPkg: running [2025-09-06 10:24:03][357211241591595][361 ms][DEBUG] END check_scloud in 359 ms [2025-09-06 10:24:03][357211241591595][361 ms][DEBUG] START check_boot_completed [2025-09-06 10:24:03][357211241591595][361 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:24:03][357211241591595][407 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:24:03][357211241591595][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:24:04][357211241591595][470 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:24:04][357211241591595][470 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:24:04][357211241591595][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:24:04][357211241591595][595 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 268\nsuccessfulTxPacketsPerSecond: 8.864773380473453\nretriedTxPackets: 28\nretriedTxPacketsPerSecond: 1.1100566378394965\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 227\nsuccessfulRxPacketsPerSecond: 6.114247275497704\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:24:04][357211241591595][595 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:24:05][357211241591595][2282 ms][DEBUG] SU: done in 1687 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.157/303.157/303.157/0.000 ms\n [2025-09-06 10:24:05][357211241591595][2282 ms][DEBUG] check_internet: online [2025-09-06 10:24:05][357211241591595][2282 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:24:05][357211241591595][2282 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211241591595\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8431\"}'\'' -e'"" [2025-09-06 10:24:05][357211241591595][2282 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:24:05][357211241591595][2282 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211241591595\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8431\"}'\'' -e'"" [2025-09-06 10:24:10][357211241591595][6859 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be00daca-1592-4130-8ae1-a0abebbb9c12","id":"QR_be00daca-1592-4130-8ae1-a0abebbb9c12","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:24:10][357211241591595][7015 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-06 10:24:10][357211241591595][7015 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-06 10:24:10][357211241591595][7015 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:24:12][357211241591595][0 ms][INFO] === Request start === [2025-09-06 10:24:12][357211241591595][1 ms][DEBUG] START check_scloud [2025-09-06 10:24:12][357211241591595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:24:13][357211241591595][341 ms][DEBUG] SU: done in 340 ms; outu0_a118 10948 4975 24227288 84348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:24:13][357211241591595][341 ms][DEBUG] targetPkg: running [2025-09-06 10:24:13][357211241591595][341 ms][DEBUG] END check_scloud in 340 ms [2025-09-06 10:24:13][357211241591595][341 ms][DEBUG] START check_boot_completed [2025-09-06 10:24:13][357211241591595][341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:24:13][357211241591595][388 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:24:13][357211241591595][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:24:13][357211241591595][450 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:24:13][357211241591595][450 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:24:13][357211241591595][450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:24:13][357211241591595][591 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 268\nsuccessfulTxPacketsPerSecond: 8.864773380473453\nretriedTxPackets: 28\nretriedTxPacketsPerSecond: 1.1100566378394965\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 227\nsuccessfulRxPacketsPerSecond: 6.114247275497704\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:24:13][357211241591595][591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:24:13][357211241591595][966 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.516/228.516/228.516/0.000 ms\n [2025-09-06 10:24:13][357211241591595][966 ms][DEBUG] check_internet: online [2025-09-06 10:24:13][357211241591595][966 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:24:13][357211241591595][966 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211241591595\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2774\"}'\'' -e'"" [2025-09-06 10:24:13][357211241591595][966 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:24:13][357211241591595][966 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211241591595\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2774\"}'\'' -e'"" [2025-09-06 10:24:19][357211241591595][6370 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1eae40f-9355-428d-8fd2-0aeb8c7bbe4f","id":"QR_e1eae40f-9355-428d-8fd2-0aeb8c7bbe4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:24:19][357211241591595][6527 ms][DEBUG] proc_open done in 5560 ms; code=255; res.len=3343 [2025-09-06 10:24:19][357211241591595][6527 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-09-06 10:24:19][357211241591595][6527 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:27:03][353182201112256][1 ms][INFO] === Request start === [2025-09-06 10:27:03][353182201112256][1 ms][DEBUG] START check_scloud [2025-09-06 10:27:03][353182201112256][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:27:03][353182201112256][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 10948 4975 24360536 100060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:27:03][353182201112256][259 ms][DEBUG] targetPkg: running [2025-09-06 10:27:03][353182201112256][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-06 10:27:03][353182201112256][259 ms][DEBUG] START check_boot_completed [2025-09-06 10:27:03][353182201112256][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:27:03][353182201112256][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:27:03][353182201112256][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:27:04][353182201112256][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:27:04][353182201112256][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:27:04][353182201112256][337 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:27:04][353182201112256][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182201112256\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7020\"}'\'' -e'"" [2025-09-06 10:27:04][353182201112256][338 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:27:04][353182201112256][338 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182201112256\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7020\"}'\'' -e'"" [2025-09-06 10:27:08][353182201112256][4336 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10240301-7d06-4250-bc9c-e92c8dcf7e11","id":"QR_10240301-7d06-4250-bc9c-e92c8dcf7e11","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:27:08][353182201112256][4492 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-09-06 10:27:08][353182201112256][4493 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-09-06 10:27:08][353182201112256][4493 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:27:10][353182201112256][0 ms][INFO] === Request start === [2025-09-06 10:27:10][353182201112256][1 ms][DEBUG] START check_scloud [2025-09-06 10:27:10][353182201112256][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:27:10][353182201112256][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 10948 4975 24541920 110844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:27:10][353182201112256][310 ms][DEBUG] targetPkg: running [2025-09-06 10:27:10][353182201112256][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 10:27:10][353182201112256][310 ms][DEBUG] START check_boot_completed [2025-09-06 10:27:10][353182201112256][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:27:10][353182201112256][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:27:10][353182201112256][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:27:10][353182201112256][434 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 10:27:10][353182201112256][435 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 10:27:10][353182201112256][435 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:27:10][353182201112256][435 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182201112256\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3622\"}'\'' -e'"" [2025-09-06 10:27:10][353182201112256][435 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:27:10][353182201112256][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182201112256\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3622\"}'\'' -e'"" [2025-09-06 10:27:16][353182201112256][5683 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7de5ba52-207f-413e-a58b-3dd1b8553b0a","id":"QR_7de5ba52-207f-413e-a58b-3dd1b8553b0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:27:16][353182201112256][5839 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-06 10:27:16][353182201112256][5839 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-06 10:27:16][353182201112256][5839 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:35:03][351978520025109][1 ms][INFO] === Request start === [2025-09-06 10:35:03][351978520025109][1 ms][DEBUG] START check_scloud [2025-09-06 10:35:03][351978520025109][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:35:03][351978520025109][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 10948 4975 24623828 122260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:35:03][351978520025109][302 ms][DEBUG] targetPkg: running [2025-09-06 10:35:03][351978520025109][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 10:35:03][351978520025109][302 ms][DEBUG] START check_boot_completed [2025-09-06 10:35:03][351978520025109][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:35:03][351978520025109][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:35:03][351978520025109][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:35:03][351978520025109][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:35:03][351978520025109][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:35:03][351978520025109][380 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:35:03][351978520025109][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520025109\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5980\"}'\'' -e'"" [2025-09-06 10:35:03][351978520025109][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:35:03][351978520025109][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520025109\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5980\"}'\'' -e'"" [2025-09-06 10:35:08][351978520025109][4941 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d92e02d6-23f2-4579-86ad-86f51dce30ce","id":"QR_d92e02d6-23f2-4579-86ad-86f51dce30ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:35:08][351978520025109][5097 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-06 10:35:08][351978520025109][5097 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-09-06 10:35:08][351978520025109][5097 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:35:10][351978520025109][0 ms][INFO] === Request start === [2025-09-06 10:35:10][351978520025109][1 ms][DEBUG] START check_scloud [2025-09-06 10:35:10][351978520025109][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:35:11][351978520025109][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 10948 4975 24802344 131736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:35:11][351978520025109][304 ms][DEBUG] targetPkg: running [2025-09-06 10:35:11][351978520025109][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 10:35:11][351978520025109][304 ms][DEBUG] START check_boot_completed [2025-09-06 10:35:11][351978520025109][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:35:11][351978520025109][350 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:35:11][351978520025109][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:35:11][351978520025109][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:35:11][351978520025109][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:35:11][351978520025109][413 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:35:11][351978520025109][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520025109\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1402\"}'\'' -e'"" [2025-09-06 10:35:11][351978520025109][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:35:11][351978520025109][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520025109\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1402\"}'\'' -e'"" [2025-09-06 10:35:16][351978520025109][5786 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ddea678a-ac2c-415b-8160-10f0c22efd04","id":"QR_ddea678a-ac2c-415b-8160-10f0c22efd04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:35:16][351978520025109][5943 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-06 10:35:16][351978520025109][5943 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-06 10:35:16][351978520025109][5943 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:42:03][352549938365277][1 ms][INFO] === Request start === [2025-09-06 10:42:03][352549938365277][1 ms][DEBUG] START check_scloud [2025-09-06 10:42:03][352549938365277][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:42:03][352549938365277][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 10948 4975 24888476 141456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:42:03][352549938365277][267 ms][DEBUG] targetPkg: running [2025-09-06 10:42:03][352549938365277][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-06 10:42:03][352549938365277][267 ms][DEBUG] START check_boot_completed [2025-09-06 10:42:03][352549938365277][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:42:03][352549938365277][298 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:42:03][352549938365277][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:42:03][352549938365277][346 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 10:42:03][352549938365277][347 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-06 10:42:03][352549938365277][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:42:03][352549938365277][471 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1273\nsuccessfulTxPacketsPerSecond: 0.1467113492811144\nretriedTxPackets: 159\nretriedTxPacketsPerSecond: 0.023164949886491745\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1241\nsuccessfulRxPacketsPerSecond: 0.1467113492811144\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:42:03][352549938365277][472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:42:05][352549938365277][1829 ms][DEBUG] SU: done in 1357 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=310 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 310.192/310.192/310.192/0.000 ms\n [2025-09-06 10:42:05][352549938365277][1829 ms][DEBUG] check_internet: online [2025-09-06 10:42:05][352549938365277][1829 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:42:05][352549938365277][1829 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938365277\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2166\"}'\'' -e'"" [2025-09-06 10:42:05][352549938365277][1829 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:42:05][352549938365277][1829 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938365277\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2166\"}'\'' -e'"" [2025-09-06 10:42:09][352549938365277][5890 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc6186a6-8d5c-469a-ab05-6b6654e57b10","id":"QR_fc6186a6-8d5c-469a-ab05-6b6654e57b10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:42:09][352549938365277][6047 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-09-06 10:42:09][352549938365277][6047 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-09-06 10:42:09][352549938365277][6047 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:42:11][352549938365277][0 ms][INFO] === Request start === [2025-09-06 10:42:11][352549938365277][1 ms][DEBUG] START check_scloud [2025-09-06 10:42:11][352549938365277][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:42:12][352549938365277][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 10948 4975 25089008 152860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:42:12][352549938365277][329 ms][DEBUG] targetPkg: running [2025-09-06 10:42:12][352549938365277][329 ms][DEBUG] END check_scloud in 329 ms [2025-09-06 10:42:12][352549938365277][329 ms][DEBUG] START check_boot_completed [2025-09-06 10:42:12][352549938365277][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:42:12][352549938365277][376 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:42:12][352549938365277][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:42:12][352549938365277][438 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:42:12][352549938365277][439 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:42:12][352549938365277][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:42:12][352549938365277][548 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1273\nsuccessfulTxPacketsPerSecond: 0.1467113492811144\nretriedTxPackets: 159\nretriedTxPacketsPerSecond: 0.023164949886491745\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1241\nsuccessfulRxPacketsPerSecond: 0.1467113492811144\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:42:12][352549938365277][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:42:12][352549938365277][954 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.838/300.838/300.838/0.000 ms\n [2025-09-06 10:42:12][352549938365277][954 ms][DEBUG] check_internet: online [2025-09-06 10:42:12][352549938365277][954 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:42:12][352549938365277][954 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938365277\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3308\"}'\'' -e'"" [2025-09-06 10:42:12][352549938365277][954 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:42:12][352549938365277][954 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938365277\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3308\"}'\'' -e'"" [2025-09-06 10:42:18][352549938365277][6421 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03ceb5f2-80c7-479d-93a6-8959e8458f43","id":"QR_03ceb5f2-80c7-479d-93a6-8959e8458f43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:42:18][352549938365277][6577 ms][DEBUG] proc_open done in 5624 ms; code=255; res.len=3343 [2025-09-06 10:42:18][352549938365277][6577 ms][DEBUG] END runCmdUntilRes#1 in 5624 ms [2025-09-06 10:42:18][352549938365277][6577 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:43:03][350013883449711][0 ms][INFO] === Request start === [2025-09-06 10:43:03][350013883449711][1 ms][DEBUG] START check_scloud [2025-09-06 10:43:03][350013883449711][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:43:04][350013883449711][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 10948 4975 25198772 158524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:43:04][350013883449711][319 ms][DEBUG] targetPkg: running [2025-09-06 10:43:04][350013883449711][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 10:43:04][350013883449711][320 ms][DEBUG] START check_boot_completed [2025-09-06 10:43:04][350013883449711][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:43:04][350013883449711][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:43:04][350013883449711][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:43:04][350013883449711][400 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 10:43:04][350013883449711][400 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-06 10:43:04][350013883449711][400 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:43:04][350013883449711][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883449711\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3436\"}'\'' -e'"" [2025-09-06 10:43:04][350013883449711][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:43:04][350013883449711][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883449711\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3436\"}'\'' -e'"" [2025-09-06 10:43:07][350013883449711][3819 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e064bbc-f4ae-4fbf-9d98-293517c81f1a","id":"QR_8e064bbc-f4ae-4fbf-9d98-293517c81f1a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:43:07][350013883449711][3975 ms][DEBUG] proc_open done in 3574 ms; code=255; res.len=3343 [2025-09-06 10:43:07][350013883449711][3975 ms][DEBUG] END runCmdUntilRes#1 in 3575 ms [2025-09-06 10:43:07][350013883449711][3975 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:43:10][350013883449711][0 ms][INFO] === Request start === [2025-09-06 10:43:10][350013883449711][1 ms][DEBUG] START check_scloud [2025-09-06 10:43:10][350013883449711][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:43:10][350013883449711][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 10948 4975 25380284 169672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:43:10][350013883449711][274 ms][DEBUG] targetPkg: running [2025-09-06 10:43:10][350013883449711][274 ms][DEBUG] END check_scloud in 274 ms [2025-09-06 10:43:10][350013883449711][274 ms][DEBUG] START check_boot_completed [2025-09-06 10:43:10][350013883449711][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:43:10][350013883449711][321 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:43:10][350013883449711][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:43:10][350013883449711][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:43:10][350013883449711][368 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 10:43:10][350013883449711][368 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:43:10][350013883449711][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883449711\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6680\"}'\'' -e'"" [2025-09-06 10:43:10][350013883449711][368 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:43:10][350013883449711][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883449711\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6680\"}'\'' -e'"" [2025-09-06 10:43:14][350013883449711][4648 ms][DEBUG] proc_open done in 4280 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 10:43:14][350013883449711][4648 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-09-06 10:43:14][350013883449711][4649 ms][WARN] Detected error: Process with pid 10948 either refused to load frida-agent, or terminated during injectionProcess with pid 10948 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 10:43:14][350013883449711][4649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 10:43:15][350013883449711][4898 ms][DEBUG] SU: done in 249 ms; outsystem 5395 4975 13198568 254628 ep_poll 0 S system_server\n [2025-09-06 10:43:15][350013883449711][4898 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 10:43:15][350013883449711][5023 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 10:43:15][350013883449711][5023 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 10:43:15][350013883449711][5023 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 10:43:15][350013883449711][5148 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 10:43:15][350013883449711][5148 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 10:43:15][350013883449711][5320 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 10:43:17][350013883449711][7335 ms][DEBUG] START check_boot_completed [2025-09-06 10:43:17][350013883449711][7335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:43:17][350013883449711][7382 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:43:17][350013883449711][7382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:43:17][350013883449711][7429 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:43:17][350013883449711][7429 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 10:43:20][350013883449711][10444 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 10:43:20][350013883449711][10444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883449711\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6680\"}'\'' -e'"" [2025-09-06 10:43:26][350013883449711][15708 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_263c7205-06e9-4c03-a12a-e3119099b6f3","id":"QR_263c7205-06e9-4c03-a12a-e3119099b6f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:43:26][350013883449711][15864 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 10:43:26][350013883449711][15864 ms][DEBUG] END runCmdUntilRes#2 in 5421 ms [2025-09-06 10:43:26][350013883449711][15864 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:46:03][357435845370276][1 ms][INFO] === Request start === [2025-09-06 10:46:03][357435845370276][1 ms][DEBUG] START check_scloud [2025-09-06 10:46:03][357435845370276][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:46:03][357435845370276][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 18039 4975 23880104 128304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:46:03][357435845370276][270 ms][DEBUG] targetPkg: running [2025-09-06 10:46:03][357435845370276][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-06 10:46:03][357435845370276][270 ms][DEBUG] START check_boot_completed [2025-09-06 10:46:03][357435845370276][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:46:03][357435845370276][301 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 10:46:03][357435845370276][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:46:03][357435845370276][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:46:03][357435845370276][347 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 10:46:03][357435845370276][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:46:03][357435845370276][457 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1370\nsuccessfulTxPacketsPerSecond: 0.3211505798920007\nretriedTxPackets: 183\nretriedTxPacketsPerSecond: 0.07945993729286616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1328\nsuccessfulRxPacketsPerSecond: 0.2880422726866398\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:46:03][357435845370276][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:46:04][357435845370276][879 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.354/303.354/303.354/0.000 ms\n [2025-09-06 10:46:04][357435845370276][879 ms][DEBUG] check_internet: online [2025-09-06 10:46:04][357435845370276][879 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:46:04][357435845370276][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435845370276\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1172\"}'\'' -e'"" [2025-09-06 10:46:04][357435845370276][879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:46:04][357435845370276][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435845370276\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1172\"}'\'' -e'"" [2025-09-06 10:46:09][357435845370276][5596 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3f942ac-a193-416f-9aa8-48cee4fbde29","id":"QR_a3f942ac-a193-416f-9aa8-48cee4fbde29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:46:09][357435845370276][5752 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-06 10:46:09][357435845370276][5752 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-06 10:46:09][357435845370276][5752 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:46:11][357435845370276][0 ms][INFO] === Request start === [2025-09-06 10:46:11][357435845370276][1 ms][DEBUG] START check_scloud [2025-09-06 10:46:11][357435845370276][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:46:11][357435845370276][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 18039 4975 24034928 139100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:46:11][357435845370276][283 ms][DEBUG] targetPkg: running [2025-09-06 10:46:11][357435845370276][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-06 10:46:11][357435845370276][283 ms][DEBUG] START check_boot_completed [2025-09-06 10:46:11][357435845370276][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:46:11][357435845370276][329 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:46:11][357435845370276][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:46:12][357435845370276][392 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:46:12][357435845370276][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:46:12][357435845370276][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:46:12][357435845370276][517 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1370\nsuccessfulTxPacketsPerSecond: 0.3211505798920007\nretriedTxPackets: 183\nretriedTxPacketsPerSecond: 0.07945993729286616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1328\nsuccessfulRxPacketsPerSecond: 0.2880422726866398\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:46:12][357435845370276][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:46:12][357435845370276][1157 ms][DEBUG] SU: done in 640 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.876/301.876/301.876/0.000 ms\n [2025-09-06 10:46:12][357435845370276][1157 ms][DEBUG] check_internet: online [2025-09-06 10:46:12][357435845370276][1157 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:46:12][357435845370276][1158 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435845370276\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8547\"}'\'' -e'"" [2025-09-06 10:46:12][357435845370276][1158 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:46:12][357435845370276][1158 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435845370276\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8547\"}'\'' -e'"" [2025-09-06 10:46:18][357435845370276][6421 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50b710b6-bade-45a4-8da2-e5145e5ae627","id":"QR_50b710b6-bade-45a4-8da2-e5145e5ae627","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:46:18][357435845370276][6578 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 10:46:18][357435845370276][6578 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-06 10:46:18][357435845370276][6578 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:46:22][356414815671683][0 ms][INFO] === Request start === [2025-09-06 10:46:22][356414815671683][1 ms][DEBUG] START check_scloud [2025-09-06 10:46:22][356414815671683][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:46:22][356414815671683][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 18039 4975 24197688 150708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:46:22][356414815671683][299 ms][DEBUG] targetPkg: running [2025-09-06 10:46:22][356414815671683][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 10:46:22][356414815671683][299 ms][DEBUG] START check_boot_completed [2025-09-06 10:46:22][356414815671683][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:46:22][356414815671683][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:46:22][356414815671683][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:46:22][356414815671683][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:46:22][356414815671683][407 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 10:46:22][356414815671683][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:46:22][356414815671683][501 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1370\nsuccessfulTxPacketsPerSecond: 0.3211505798920007\nretriedTxPackets: 183\nretriedTxPacketsPerSecond: 0.07945993729286616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1328\nsuccessfulRxPacketsPerSecond: 0.2880422726866398\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:46:22][356414815671683][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:46:23][356414815671683][923 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=334 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 334.397/334.397/334.397/0.000 ms\n [2025-09-06 10:46:23][356414815671683][923 ms][DEBUG] check_internet: online [2025-09-06 10:46:23][356414815671683][923 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:46:23][356414815671683][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815671683\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5805\"}'\'' -e'"" [2025-09-06 10:46:23][356414815671683][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:46:23][356414815671683][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815671683\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5805\"}'\'' -e'"" [2025-09-06 10:46:26][356414815671683][4094 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 10:46:26][356414815671683][4250 ms][DEBUG] proc_open done in 3327 ms; code=255; res.len=101 [2025-09-06 10:46:26][356414815671683][4250 ms][DEBUG] END runCmdUntilRes#1 in 3327 ms [2025-09-06 10:46:26][356414815671683][4251 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 10:46:27][][0 ms][INFO] === Request start === [2025-09-06 10:46:27][][1 ms][DEBUG] START check_scloud [2025-09-06 10:46:27][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:46:27][][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18039 4975 24325916 161980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:46:27][][307 ms][DEBUG] targetPkg: running [2025-09-06 10:46:27][][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 10:46:27][][307 ms][DEBUG] START check_boot_completed [2025-09-06 10:46:27][][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:46:27][][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:46:27][][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:46:27][][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:46:27][][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:46:27][][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:46:27][][510 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1370\nsuccessfulTxPacketsPerSecond: 0.3211505798920007\nretriedTxPackets: 183\nretriedTxPacketsPerSecond: 0.07945993729286616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1328\nsuccessfulRxPacketsPerSecond: 0.2880422726866398\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:46:27][][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:46:27][][838 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.055/227.055/227.055/0.000 ms\n [2025-09-06 10:46:27][][838 ms][DEBUG] check_internet: online [2025-09-06 10:46:27][][838 ms][DEBUG] rawBody.length=1131 [2025-09-06 10:46:27][][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TC07XG5K\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4975\"}'\'' -e'"" [2025-09-06 10:46:27][][838 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:46:27][][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TC07XG5K\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4975\"}'\'' -e'"" [2025-09-06 10:46:30][][3931 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 10:46:31][][4087 ms][DEBUG] proc_open done in 3249 ms; code=255; res.len=101 [2025-09-06 10:46:31][][4087 ms][DEBUG] END runCmdUntilRes#1 in 3249 ms [2025-09-06 10:46:31][][4087 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 10:46:32][356414815671683][0 ms][INFO] === Request start === [2025-09-06 10:46:32][356414815671683][1 ms][DEBUG] START check_scloud [2025-09-06 10:46:32][356414815671683][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:46:33][356414815671683][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 18039 4975 24480804 173884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:46:33][356414815671683][294 ms][DEBUG] targetPkg: running [2025-09-06 10:46:33][356414815671683][294 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 10:46:33][356414815671683][295 ms][DEBUG] START check_boot_completed [2025-09-06 10:46:33][356414815671683][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:46:33][356414815671683][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:46:33][356414815671683][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:46:33][356414815671683][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:46:33][356414815671683][388 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 10:46:33][356414815671683][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:46:33][356414815671683][544 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1370\nsuccessfulTxPacketsPerSecond: 0.3211505798920007\nretriedTxPackets: 183\nretriedTxPacketsPerSecond: 0.07945993729286616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1328\nsuccessfulRxPacketsPerSecond: 0.2880422726866398\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:46:33][356414815671683][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:46:33][356414815671683][903 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.306/228.306/228.306/0.000 ms\n [2025-09-06 10:46:33][356414815671683][903 ms][DEBUG] check_internet: online [2025-09-06 10:46:33][356414815671683][903 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:46:33][356414815671683][903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815671683\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3494\"}'\'' -e'"" [2025-09-06 10:46:33][356414815671683][904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:46:33][356414815671683][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815671683\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3494\"}'\'' -e'"" [2025-09-06 10:46:38][356414815671683][5637 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac1a3a9a-e9b1-424f-bba2-81c54867821b","id":"QR_ac1a3a9a-e9b1-424f-bba2-81c54867821b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:46:38][356414815671683][5793 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 10:46:38][356414815671683][5793 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 10:46:38][356414815671683][5793 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:46:42][356414815671683][0 ms][INFO] === Request start === [2025-09-06 10:46:42][356414815671683][1 ms][DEBUG] START check_scloud [2025-09-06 10:46:42][356414815671683][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:46:42][356414815671683][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 18039 4975 24629348 184524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:46:42][356414815671683][257 ms][DEBUG] targetPkg: running [2025-09-06 10:46:42][356414815671683][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-06 10:46:42][356414815671683][257 ms][DEBUG] START check_boot_completed [2025-09-06 10:46:42][356414815671683][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:46:42][356414815671683][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:46:42][356414815671683][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:46:42][356414815671683][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:46:42][356414815671683][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:46:42][356414815671683][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:46:42][356414815671683][460 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1370\nsuccessfulTxPacketsPerSecond: 0.3211505798920007\nretriedTxPackets: 183\nretriedTxPacketsPerSecond: 0.07945993729286616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1328\nsuccessfulRxPacketsPerSecond: 0.2880422726866398\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:46:42][356414815671683][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:46:43][356414815671683][851 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=270 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 270.682/270.682/270.682/0.000 ms\n [2025-09-06 10:46:43][356414815671683][851 ms][DEBUG] check_internet: online [2025-09-06 10:46:43][356414815671683][851 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:46:43][356414815671683][851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815671683\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2078\"}'\'' -e'"" [2025-09-06 10:46:43][356414815671683][851 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:46:43][356414815671683][851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815671683\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2078\"}'\'' -e'"" [2025-09-06 10:46:46][356414815671683][4022 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 10:46:46][356414815671683][4178 ms][DEBUG] proc_open done in 3327 ms; code=255; res.len=101 [2025-09-06 10:46:46][356414815671683][4178 ms][DEBUG] END runCmdUntilRes#1 in 3327 ms [2025-09-06 10:46:46][356414815671683][4178 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 10:46:46][][0 ms][INFO] === Request start === [2025-09-06 10:46:46][][1 ms][DEBUG] START check_scloud [2025-09-06 10:46:46][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:46:47][][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 18039 4975 24788168 196384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:46:47][][303 ms][DEBUG] targetPkg: running [2025-09-06 10:46:47][][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 10:46:47][][303 ms][DEBUG] START check_boot_completed [2025-09-06 10:46:47][][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:46:47][][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:46:47][][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:46:47][][381 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 10:46:47][][382 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 10:46:47][][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:46:47][][506 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1370\nsuccessfulTxPacketsPerSecond: 0.3211505798920007\nretriedTxPackets: 183\nretriedTxPacketsPerSecond: 0.07945993729286616\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1328\nsuccessfulRxPacketsPerSecond: 0.2880422726866398\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:46:47][][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:46:47][][849 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.568/227.568/227.568/0.000 ms\n [2025-09-06 10:46:47][][850 ms][DEBUG] check_internet: online [2025-09-06 10:46:47][][850 ms][DEBUG] rawBody.length=1131 [2025-09-06 10:46:47][][850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TC07XG5K\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4722\"}'\'' -e'"" [2025-09-06 10:46:47][][850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:46:47][][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TC07XG5K\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4722\"}'\'' -e'"" [2025-09-06 10:46:50][][3942 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 10:46:50][][4099 ms][DEBUG] proc_open done in 3248 ms; code=255; res.len=101 [2025-09-06 10:46:50][][4099 ms][DEBUG] END runCmdUntilRes#1 in 3249 ms [2025-09-06 10:46:50][][4099 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 10:47:03][354516965961946][0 ms][INFO] === Request start === [2025-09-06 10:47:03][354516965961946][1 ms][DEBUG] START check_scloud [2025-09-06 10:47:03][354516965961946][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:47:03][354516965961946][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 18039 4975 24932744 207428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:47:03][354516965961946][320 ms][DEBUG] targetPkg: running [2025-09-06 10:47:03][354516965961946][320 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 10:47:03][354516965961946][320 ms][DEBUG] START check_boot_completed [2025-09-06 10:47:03][354516965961946][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:47:04][354516965961946][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:47:04][354516965961946][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:47:04][354516965961946][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:47:04][354516965961946][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 10:47:04][354516965961946][414 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:47:04][354516965961946][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354516965961946\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8539\"}'\'' -e'"" [2025-09-06 10:47:04][354516965961946][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:47:04][354516965961946][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354516965961946\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8539\"}'\'' -e'"" [2025-09-06 10:47:07][354516965961946][3944 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbe51b2f-0bbc-4ca1-a9d8-7b92f5831239","id":"QR_bbe51b2f-0bbc-4ca1-a9d8-7b92f5831239","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:47:07][354516965961946][4100 ms][DEBUG] proc_open done in 3687 ms; code=255; res.len=3343 [2025-09-06 10:47:07][354516965961946][4100 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-09-06 10:47:07][354516965961946][4100 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:47:10][354516965961946][0 ms][INFO] === Request start === [2025-09-06 10:47:10][354516965961946][1 ms][DEBUG] START check_scloud [2025-09-06 10:47:10][354516965961946][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:47:10][354516965961946][274 ms][DEBUG] SU: done in 274 ms; outu0_a118 18039 4975 25069036 219288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:47:10][354516965961946][274 ms][DEBUG] targetPkg: running [2025-09-06 10:47:10][354516965961946][274 ms][DEBUG] END check_scloud in 274 ms [2025-09-06 10:47:10][354516965961946][274 ms][DEBUG] START check_boot_completed [2025-09-06 10:47:10][354516965961946][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:47:10][354516965961946][306 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:47:10][354516965961946][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:47:10][354516965961946][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:47:10][354516965961946][352 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:47:10][354516965961946][352 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:47:10][354516965961946][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354516965961946\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3716\"}'\'' -e'"" [2025-09-06 10:47:10][354516965961946][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:47:10][354516965961946][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354516965961946\",\"model\":\"SM-S921B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3716\"}'\'' -e'"" [2025-09-06 10:47:15][354516965961946][5101 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f92dff2-0943-485a-9cee-4d1254cb9c7f","id":"QR_4f92dff2-0943-485a-9cee-4d1254cb9c7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:47:15][354516965961946][5257 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-06 10:47:15][354516965961946][5258 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 10:47:15][354516965961946][5258 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:48:03][350824190405109][0 ms][INFO] === Request start === [2025-09-06 10:48:03][350824190405109][1 ms][DEBUG] START check_scloud [2025-09-06 10:48:03][350824190405109][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:48:04][350824190405109][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 18039 4975 25195116 230504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:48:04][350824190405109][261 ms][DEBUG] targetPkg: running [2025-09-06 10:48:04][350824190405109][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 10:48:04][350824190405109][261 ms][DEBUG] START check_boot_completed [2025-09-06 10:48:04][350824190405109][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:48:04][350824190405109][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:48:04][350824190405109][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:48:04][350824190405109][356 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 10:48:04][350824190405109][356 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 10:48:04][350824190405109][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:48:04][350824190405109][511 ms][DEBUG] SU: done in 154 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1765\nsuccessfulTxPacketsPerSecond: 1.311481941391698\nretriedTxPackets: 277\nretriedTxPacketsPerSecond: 0.31209949997675857\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1661\nsuccessfulRxPacketsPerSecond: 1.1056290797049\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:48:04][350824190405109][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:48:04][350824190405109][886 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.734/269.734/269.734/0.000 ms\n [2025-09-06 10:48:04][350824190405109][886 ms][DEBUG] check_internet: online [2025-09-06 10:48:04][350824190405109][886 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:48:04][350824190405109][886 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824190405109\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1641\"}'\'' -e'"" [2025-09-06 10:48:04][350824190405109][886 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:48:04][350824190405109][886 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824190405109\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1641\"}'\'' -e'"" [2025-09-06 10:48:09][350824190405109][5478 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0441f362-d4d2-4051-8ebe-bf5580e49e36","id":"QR_0441f362-d4d2-4051-8ebe-bf5580e49e36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:48:09][350824190405109][5634 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-06 10:48:09][350824190405109][5634 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-09-06 10:48:09][350824190405109][5635 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:48:11][350824190405109][1 ms][INFO] === Request start === [2025-09-06 10:48:11][350824190405109][1 ms][DEBUG] START check_scloud [2025-09-06 10:48:11][350824190405109][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:48:12][350824190405109][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18039 4975 25331576 241224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:48:12][350824190405109][306 ms][DEBUG] targetPkg: running [2025-09-06 10:48:12][350824190405109][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 10:48:12][350824190405109][306 ms][DEBUG] START check_boot_completed [2025-09-06 10:48:12][350824190405109][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:48:12][350824190405109][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:48:12][350824190405109][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:48:12][350824190405109][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:48:12][350824190405109][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 10:48:12][350824190405109][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:48:12][350824190405109][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30912 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1765\nsuccessfulTxPacketsPerSecond: 1.311481941391698\nretriedTxPackets: 277\nretriedTxPacketsPerSecond: 0.31209949997675857\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1661\nsuccessfulRxPacketsPerSecond: 1.1056290797049\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:48:12][350824190405109][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:48:12][350824190405109][915 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.476/253.476/253.476/0.000 ms\n [2025-09-06 10:48:12][350824190405109][915 ms][DEBUG] check_internet: online [2025-09-06 10:48:12][350824190405109][915 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:48:12][350824190405109][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824190405109\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4910\"}'\'' -e'"" [2025-09-06 10:48:12][350824190405109][915 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:48:12][350824190405109][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824190405109\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4910\"}'\'' -e'"" [2025-09-06 10:48:20][350824190405109][9007 ms][DEBUG] proc_open done in 8092 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 10:48:20][350824190405109][9007 ms][DEBUG] END runCmdUntilRes#1 in 8092 ms [2025-09-06 10:48:20][350824190405109][9007 ms][WARN] Detected error: Process with pid 18039 either refused to load frida-agent, or terminated during injectionProcess with pid 18039 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 10:48:20][350824190405109][9007 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 10:48:21][350824190405109][9397 ms][DEBUG] SU: done in 390 ms; out [2025-09-06 10:48:21][350824190405109][9398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 10:48:21][350824190405109][9805 ms][DEBUG] SU: done in 407 ms; out [2025-09-06 10:48:21][350824190405109][9805 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 10:48:21][350824190405109][9805 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 10:48:22][350824190405109][10163 ms][DEBUG] SU: done in 358 ms; out [2025-09-06 10:48:22][350824190405109][10163 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 10:48:22][350824190405109][10381 ms][DEBUG] SU: done in 218 ms; out [2025-09-06 10:48:24][350824190405109][12396 ms][DEBUG] START check_boot_completed [2025-09-06 10:48:24][350824190405109][12396 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:48:24][350824190405109][12427 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:48:24][350824190405109][12427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:48:24][350824190405109][12474 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:48:24][350824190405109][12474 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:48:27][350824190405109][15489 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 10:48:27][350824190405109][15489 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824190405109\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4910\"}'\'' -e'"" [2025-09-06 10:48:28][350824190405109][17021 ms][DEBUG] proc_open done in 1531 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-06 10:48:28][350824190405109][17021 ms][DEBUG] END runCmdUntilRes#2 in 1531 ms [2025-09-06 10:48:28][350824190405109][17021 ms][WARN] Detected error 2; Reboot the device [2025-09-06 10:48:28][350824190405109][17021 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 10:48:29][350824190405109][17270 ms][DEBUG] SU: done in 250 ms; outsystem 19970 19627 7499696 137076 0 0 R system_server\n [2025-09-06 10:48:29][350824190405109][17270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-06 10:48:29][350824190405109][17926 ms][DEBUG] SU: done in 656 ms; out [2025-09-06 10:49:03][353204667065180][1 ms][INFO] === Request start === [2025-09-06 10:49:03][353204667065180][1 ms][DEBUG] START check_scloud [2025-09-06 10:49:03][353204667065180][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:49:03][353204667065180][36 ms][DEBUG] SU: done in 35 ms; out [2025-09-06 10:49:03][353204667065180][36 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 10:49:03][353204667065180][67 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 10:49:03][353204667065180][67 ms][WARN] check_devices: no device [2025-09-06 10:49:03][353204667065180][67 ms][WARN] check_devices: no device [2025-09-06 10:49:03][353204667065180][67 ms][DEBUG] END check_scloud in 66 ms [2025-09-06 10:50:03][353204667065180][0 ms][INFO] === Request start === [2025-09-06 10:50:03][353204667065180][1 ms][DEBUG] START check_scloud [2025-09-06 10:50:03][353204667065180][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:50:03][353204667065180][380 ms][DEBUG] SU: done in 379 ms; out [2025-09-06 10:50:03][353204667065180][380 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 10:50:03][353204667065180][427 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 10:50:03][353204667065180][427 ms][DEBUG] check_devices: device found [2025-09-06 10:50:03][353204667065180][427 ms][WARN] targetPkg: not running, restarting [2025-09-06 10:50:03][353204667065180][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 10:50:04][353204667065180][568 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 10:50:04][353204667065180][568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 10:50:04][353204667065180][802 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 10:50:06][353204667065180][2817 ms][DEBUG] END check_scloud in 2816 ms [2025-09-06 10:50:06][353204667065180][2817 ms][DEBUG] START check_boot_completed [2025-09-06 10:50:06][353204667065180][2817 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:50:06][353204667065180][2864 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:50:06][353204667065180][2864 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:50:06][353204667065180][2942 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 10:50:06][353204667065180][2942 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 10:50:06][353204667065180][2942 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:50:06][353204667065180][3098 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31207 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 167\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 6\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 152\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:50:06][353204667065180][3099 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:50:07][353204667065180][4098 ms][DEBUG] SU: done in 1000 ms; outPING google.com (142.251.12.101) 56(84) bytes of data.\n64 bytes from se-in-f101.1e100.net (142.251.12.101): icmp_seq=1 ttl=101 time=419 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 419.328/419.328/419.328/0.000 ms\n [2025-09-06 10:50:07][353204667065180][4098 ms][DEBUG] check_internet: online [2025-09-06 10:50:07][353204667065180][4098 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:50:07][353204667065180][4098 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667065180\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5449\"}'\'' -e'"" [2025-09-06 10:50:07][353204667065180][4098 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:50:07][353204667065180][4099 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667065180\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5449\"}'\'' -e'"" [2025-09-06 10:50:12][353204667065180][9081 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1dc9b9c-55b8-4a2b-8d8a-66f84be36760","id":"QR_b1dc9b9c-55b8-4a2b-8d8a-66f84be36760","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:50:12][353204667065180][9237 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-06 10:50:12][353204667065180][9237 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-06 10:50:12][353204667065180][9237 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:50:15][353204667065180][0 ms][INFO] === Request start === [2025-09-06 10:50:15][353204667065180][1 ms][DEBUG] START check_scloud [2025-09-06 10:50:15][353204667065180][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:50:15][353204667065180][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 10575 4970 23711104 117988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:50:15][353204667065180][326 ms][DEBUG] targetPkg: running [2025-09-06 10:50:15][353204667065180][326 ms][DEBUG] END check_scloud in 325 ms [2025-09-06 10:50:15][353204667065180][326 ms][DEBUG] START check_boot_completed [2025-09-06 10:50:15][353204667065180][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:50:15][353204667065180][357 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:50:15][353204667065180][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:50:15][353204667065180][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:50:15][353204667065180][404 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:50:15][353204667065180][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:50:15][353204667065180][513 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31207 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 167\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 6\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 152\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:50:15][353204667065180][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:50:16][353204667065180][1060 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.251.12.101) 56(84) bytes of data.\n64 bytes from se-in-f101.1e100.net (142.251.12.101): icmp_seq=1 ttl=104 time=374 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 374.065/374.065/374.065/0.000 ms\n [2025-09-06 10:50:16][353204667065180][1060 ms][DEBUG] check_internet: online [2025-09-06 10:50:16][353204667065180][1060 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:50:16][353204667065180][1060 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667065180\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6798\"}'\'' -e'"" [2025-09-06 10:50:16][353204667065180][1060 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:50:16][353204667065180][1060 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667065180\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6798\"}'\'' -e'"" [2025-09-06 10:50:21][353204667065180][6683 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11ac53f6-144e-4b08-92b4-258d5c85abd7","id":"QR_11ac53f6-144e-4b08-92b4-258d5c85abd7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:50:22][353204667065180][6840 ms][DEBUG] proc_open done in 5779 ms; code=255; res.len=3343 [2025-09-06 10:50:22][353204667065180][6840 ms][DEBUG] END runCmdUntilRes#1 in 5779 ms [2025-09-06 10:50:22][353204667065180][6840 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:50:26][352192664250544][0 ms][INFO] === Request start === [2025-09-06 10:50:26][352192664250544][1 ms][DEBUG] START check_scloud [2025-09-06 10:50:26][352192664250544][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:50:26][352192664250544][390 ms][DEBUG] SU: done in 389 ms; outu0_a118 10575 4970 23858708 104060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:50:26][352192664250544][390 ms][DEBUG] targetPkg: running [2025-09-06 10:50:26][352192664250544][390 ms][DEBUG] END check_scloud in 389 ms [2025-09-06 10:50:26][352192664250544][390 ms][DEBUG] START check_boot_completed [2025-09-06 10:50:26][352192664250544][390 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:50:26][352192664250544][436 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:50:26][352192664250544][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:50:26][352192664250544][499 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 10:50:26][352192664250544][499 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 10:50:26][352192664250544][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:50:26][352192664250544][625 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31207 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 647\nsuccessfulTxPacketsPerSecond: 17.634011712743373\nretriedTxPackets: 54\nretriedTxPacketsPerSecond: 1.7634011712743372\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 681\nsuccessfulRxPacketsPerSecond: 19.434150408419256\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:50:26][352192664250544][625 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:50:27][352192664250544][1265 ms][DEBUG] SU: done in 639 ms; outPING google.com (142.251.12.101) 56(84) bytes of data.\n64 bytes from se-in-f101.1e100.net (142.251.12.101): icmp_seq=1 ttl=104 time=523 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 523.556/523.556/523.556/0.000 ms\n [2025-09-06 10:50:27][352192664250544][1265 ms][DEBUG] check_internet: online [2025-09-06 10:50:27][352192664250544][1265 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:50:27][352192664250544][1265 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664250544\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3098\"}'\'' -e'"" [2025-09-06 10:50:27][352192664250544][1265 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:50:27][352192664250544][1265 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664250544\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3098\"}'\'' -e'"" [2025-09-06 10:50:31][352192664250544][5482 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6395f58c-adf1-4bb1-9c95-ab687b4e618d","id":"QR_6395f58c-adf1-4bb1-9c95-ab687b4e618d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:50:31][352192664250544][5638 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-09-06 10:50:31][352192664250544][5638 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-09-06 10:50:31][352192664250544][5638 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:50:34][352192664250544][0 ms][INFO] === Request start === [2025-09-06 10:50:34][352192664250544][1 ms][DEBUG] START check_scloud [2025-09-06 10:50:34][352192664250544][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:50:34][352192664250544][369 ms][DEBUG] SU: done in 368 ms; outu0_a118 10575 4970 23994104 98352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:50:34][352192664250544][369 ms][DEBUG] targetPkg: running [2025-09-06 10:50:34][352192664250544][369 ms][DEBUG] END check_scloud in 369 ms [2025-09-06 10:50:34][352192664250544][369 ms][DEBUG] START check_boot_completed [2025-09-06 10:50:34][352192664250544][369 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:50:34][352192664250544][414 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 10:50:34][352192664250544][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:50:34][352192664250544][477 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 10:50:34][352192664250544][477 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 10:50:34][352192664250544][477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:50:34][352192664250544][633 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31207 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 875\nsuccessfulTxPacketsPerSecond: 21.992635897172562\nretriedTxPackets: 65\nretriedTxPacketsPerSecond: 1.0905172183651868\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 964\nsuccessfulRxPacketsPerSecond: 27.21864787081212\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:50:34][352192664250544][633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:50:35][352192664250544][1148 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.251.12.101) 56(84) bytes of data.\n64 bytes from se-in-f101.1e100.net (142.251.12.101): icmp_seq=1 ttl=104 time=376 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 376.409/376.409/376.409/0.000 ms\n [2025-09-06 10:50:35][352192664250544][1149 ms][DEBUG] check_internet: online [2025-09-06 10:50:35][352192664250544][1149 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:50:35][352192664250544][1149 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664250544\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3216\"}'\'' -e'"" [2025-09-06 10:50:35][352192664250544][1149 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:50:35][352192664250544][1149 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664250544\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3216\"}'\'' -e'"" [2025-09-06 10:50:40][352192664250544][6491 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a228c882-99ba-4527-ae0f-0fe693cd88ac","id":"QR_a228c882-99ba-4527-ae0f-0fe693cd88ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:50:40][352192664250544][6647 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-06 10:50:40][352192664250544][6647 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-09-06 10:50:40][352192664250544][6647 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:52:03][355857111544965][1 ms][INFO] === Request start === [2025-09-06 10:52:03][355857111544965][1 ms][DEBUG] START check_scloud [2025-09-06 10:52:03][355857111544965][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:52:03][355857111544965][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 10575 4970 24017444 71152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:52:03][355857111544965][338 ms][DEBUG] targetPkg: running [2025-09-06 10:52:03][355857111544965][338 ms][DEBUG] END check_scloud in 337 ms [2025-09-06 10:52:03][355857111544965][338 ms][DEBUG] START check_boot_completed [2025-09-06 10:52:03][355857111544965][339 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:52:03][355857111544965][385 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 10:52:03][355857111544965][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:52:03][355857111544965][478 ms][DEBUG] SU: done in 93 ms; out [2025-09-06 10:52:03][355857111544965][478 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 10:52:03][355857111544965][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:52:04][355857111544965][588 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31207 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 940\nsuccessfulTxPacketsPerSecond: 7.436608625908657\nretriedTxPackets: 83\nretriedTxPacketsPerSecond: 1.852073433222313\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1018\nsuccessfulRxPacketsPerSecond: 6.549092893866726\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:52:04][355857111544965][588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:52:04][355857111544965][1541 ms][DEBUG] SU: done in 953 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.476/302.476/302.476/0.000 ms\n [2025-09-06 10:52:04][355857111544965][1541 ms][DEBUG] check_internet: online [2025-09-06 10:52:04][355857111544965][1541 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:52:04][355857111544965][1541 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857111544965\",\"model\":\"SM-N986N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9969\"}'\'' -e'"" [2025-09-06 10:52:04][355857111544965][1541 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:52:04][355857111544965][1541 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857111544965\",\"model\":\"SM-N986N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9969\"}'\'' -e'"" [2025-09-06 10:52:08][355857111544965][5399 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_952251bf-1e66-4cfa-af46-5917903ace8d","id":"QR_952251bf-1e66-4cfa-af46-5917903ace8d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:52:08][355857111544965][5555 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-06 10:52:08][355857111544965][5555 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-09-06 10:52:08][355857111544965][5555 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:52:11][355857111544965][0 ms][INFO] === Request start === [2025-09-06 10:52:11][355857111544965][1 ms][DEBUG] START check_scloud [2025-09-06 10:52:11][355857111544965][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:52:11][355857111544965][335 ms][DEBUG] SU: done in 334 ms; outu0_a118 10575 4970 24165024 84324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:52:11][355857111544965][335 ms][DEBUG] targetPkg: running [2025-09-06 10:52:11][355857111544965][335 ms][DEBUG] END check_scloud in 335 ms [2025-09-06 10:52:11][355857111544965][335 ms][DEBUG] START check_boot_completed [2025-09-06 10:52:11][355857111544965][335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:52:11][355857111544965][382 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:52:11][355857111544965][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:52:11][355857111544965][430 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 10:52:11][355857111544965][430 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 10:52:11][355857111544965][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 10:52:12][355857111544965][570 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31207 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 940\nsuccessfulTxPacketsPerSecond: 7.436608625908657\nretriedTxPackets: 83\nretriedTxPacketsPerSecond: 1.852073433222313\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1018\nsuccessfulRxPacketsPerSecond: 6.549092893866726\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 10:52:12][355857111544965][570 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 10:52:12][355857111544965][1007 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=330 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 330.508/330.508/330.508/0.000 ms\n [2025-09-06 10:52:12][355857111544965][1007 ms][DEBUG] check_internet: online [2025-09-06 10:52:12][355857111544965][1007 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:52:12][355857111544965][1007 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857111544965\",\"model\":\"SM-N986N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4547\"}'\'' -e'"" [2025-09-06 10:52:12][355857111544965][1007 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:52:12][355857111544965][1007 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857111544965\",\"model\":\"SM-N986N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4547\"}'\'' -e'"" [2025-09-06 10:52:17][355857111544965][6162 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb17f498-7292-41f3-b130-84dc77bd062d","id":"QR_cb17f498-7292-41f3-b130-84dc77bd062d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:52:17][355857111544965][6318 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 10:52:17][355857111544965][6318 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 10:52:17][355857111544965][6318 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:57:03][350616251531348][1 ms][INFO] === Request start === [2025-09-06 10:57:03][350616251531348][1 ms][DEBUG] START check_scloud [2025-09-06 10:57:03][350616251531348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:57:03][350616251531348][268 ms][DEBUG] SU: done in 266 ms; outu0_a118 10575 4970 24305376 100528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:57:03][350616251531348][268 ms][DEBUG] targetPkg: running [2025-09-06 10:57:03][350616251531348][268 ms][DEBUG] END check_scloud in 266 ms [2025-09-06 10:57:03][350616251531348][268 ms][DEBUG] START check_boot_completed [2025-09-06 10:57:03][350616251531348][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:57:03][350616251531348][299 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 10:57:03][350616251531348][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:57:03][350616251531348][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:57:03][350616251531348][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 10:57:03][350616251531348][346 ms][DEBUG] rawBody.length=1150 [2025-09-06 10:57:03][350616251531348][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251531348\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8102\"}'\'' -e'"" [2025-09-06 10:57:03][350616251531348][346 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:57:03][350616251531348][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251531348\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8102\"}'\'' -e'"" [2025-09-06 10:57:09][350616251531348][5938 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93fff3b2-0d06-4c3a-a7b3-e4e503ca040f","id":"QR_93fff3b2-0d06-4c3a-a7b3-e4e503ca040f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:57:09][350616251531348][6094 ms][DEBUG] proc_open done in 5749 ms; code=255; res.len=3343 [2025-09-06 10:57:09][350616251531348][6094 ms][DEBUG] END runCmdUntilRes#1 in 5749 ms [2025-09-06 10:57:09][350616251531348][6094 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 10:57:11][350616251531348][0 ms][INFO] === Request start === [2025-09-06 10:57:11][350616251531348][1 ms][DEBUG] START check_scloud [2025-09-06 10:57:11][350616251531348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 10:57:12][350616251531348][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 10575 4970 24482280 110892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 10:57:12][350616251531348][313 ms][DEBUG] targetPkg: running [2025-09-06 10:57:12][350616251531348][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 10:57:12][350616251531348][314 ms][DEBUG] START check_boot_completed [2025-09-06 10:57:12][350616251531348][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 10:57:12][350616251531348][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 10:57:12][350616251531348][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 10:57:12][350616251531348][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 10:57:12][350616251531348][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 10:57:12][350616251531348][407 ms][DEBUG] rawBody.length=1160 [2025-09-06 10:57:12][350616251531348][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251531348\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9065\"}'\'' -e'"" [2025-09-06 10:57:12][350616251531348][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 10:57:12][350616251531348][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251531348\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9065\"}'\'' -e'"" [2025-09-06 10:57:17][350616251531348][5671 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2c4dd90-f5c7-4602-965d-d1ec5a4a2320","id":"QR_c2c4dd90-f5c7-4602-965d-d1ec5a4a2320","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 10:57:17][350616251531348][5827 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 10:57:17][350616251531348][5828 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-09-06 10:57:17][350616251531348][5828 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:02:03][352682502333551][1 ms][INFO] === Request start === [2025-09-06 11:02:03][352682502333551][1 ms][DEBUG] START check_scloud [2025-09-06 11:02:03][352682502333551][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:02:03][352682502333551][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 10575 4970 24612392 124492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:02:03][352682502333551][315 ms][DEBUG] targetPkg: running [2025-09-06 11:02:03][352682502333551][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 11:02:03][352682502333551][315 ms][DEBUG] START check_boot_completed [2025-09-06 11:02:03][352682502333551][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:02:03][352682502333551][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:02:03][352682502333551][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:02:03][352682502333551][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:02:03][352682502333551][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:02:03][352682502333551][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:02:03][352682502333551][565 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31207 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1390\nsuccessfulTxPacketsPerSecond: 0.5051126035563915\nretriedTxPackets: 171\nretriedTxPacketsPerSecond: 0.1395705878247924\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1427\nsuccessfulRxPacketsPerSecond: 0.4220348727083008\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:02:03][352682502333551][565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:02:05][352682502333551][2049 ms][DEBUG] SU: done in 1484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.939/298.939/298.939/0.000 ms\n [2025-09-06 11:02:05][352682502333551][2049 ms][DEBUG] check_internet: online [2025-09-06 11:02:05][352682502333551][2049 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:02:05][352682502333551][2049 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502333551\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5363\"}'\'' -e'"" [2025-09-06 11:02:05][352682502333551][2049 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:02:05][352682502333551][2049 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502333551\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5363\"}'\'' -e'"" [2025-09-06 11:02:09][352682502333551][6126 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 11:02:09][352682502333551][6282 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=101 [2025-09-06 11:02:09][352682502333551][6282 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-06 11:02:09][352682502333551][6282 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 11:02:09][][0 ms][INFO] === Request start === [2025-09-06 11:02:09][][1 ms][DEBUG] START check_scloud [2025-09-06 11:02:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:02:10][][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 10575 4970 24749992 135184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:02:10][][318 ms][DEBUG] targetPkg: running [2025-09-06 11:02:10][][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 11:02:10][][318 ms][DEBUG] START check_boot_completed [2025-09-06 11:02:10][][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:02:10][][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:02:10][][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:02:10][][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:02:10][][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:02:10][][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:02:10][][552 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31207 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1390\nsuccessfulTxPacketsPerSecond: 0.5051126035563915\nretriedTxPackets: 171\nretriedTxPacketsPerSecond: 0.1395705878247924\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1427\nsuccessfulRxPacketsPerSecond: 0.4220348727083008\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:02:10][][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:02:10][][896 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.826/225.826/225.826/0.000 ms\n [2025-09-06 11:02:10][][896 ms][DEBUG] check_internet: online [2025-09-06 11:02:10][][897 ms][DEBUG] rawBody.length=1131 [2025-09-06 11:02:10][][897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58N823E0FE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9594\"}'\'' -e'"" [2025-09-06 11:02:10][][897 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:02:10][][897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58N823E0FE\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9594\"}'\'' -e'"" [2025-09-06 11:02:13][][4005 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-09-06 11:02:14][][4161 ms][DEBUG] proc_open done in 3264 ms; code=255; res.len=101 [2025-09-06 11:02:14][][4161 ms][DEBUG] END runCmdUntilRes#1 in 3264 ms [2025-09-06 11:02:14][][4161 ms][INFO] SUCCESS response from frida (len=101) [2025-09-06 11:02:15][352682502333551][0 ms][INFO] === Request start === [2025-09-06 11:02:15][352682502333551][1 ms][DEBUG] START check_scloud [2025-09-06 11:02:15][352682502333551][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:02:16][352682502333551][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 10575 4970 24890416 141904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:02:16][352682502333551][303 ms][DEBUG] targetPkg: running [2025-09-06 11:02:16][352682502333551][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 11:02:16][352682502333551][303 ms][DEBUG] START check_boot_completed [2025-09-06 11:02:16][352682502333551][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:02:16][352682502333551][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:02:16][352682502333551][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:02:16][352682502333551][398 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 11:02:16][352682502333551][398 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 11:02:16][352682502333551][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:02:16][352682502333551][522 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31207 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1390\nsuccessfulTxPacketsPerSecond: 0.5051126035563915\nretriedTxPackets: 171\nretriedTxPacketsPerSecond: 0.1395705878247924\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1427\nsuccessfulRxPacketsPerSecond: 0.4220348727083008\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:02:16][352682502333551][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:02:16][352682502333551][865 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.282/228.282/228.282/0.000 ms\n [2025-09-06 11:02:16][352682502333551][865 ms][DEBUG] check_internet: online [2025-09-06 11:02:16][352682502333551][865 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:02:16][352682502333551][866 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502333551\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1535\"}'\'' -e'"" [2025-09-06 11:02:16][352682502333551][866 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:02:16][352682502333551][866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502333551\",\"model\":\"SM-N985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1535\"}'\'' -e'"" [2025-09-06 11:02:21][352682502333551][6051 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8797ad49-5483-4b00-a146-199883b1528b","id":"QR_8797ad49-5483-4b00-a146-199883b1528b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:02:22][352682502333551][6207 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-06 11:02:22][352682502333551][6208 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-06 11:02:22][352682502333551][6208 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:03:03][354551450108950][0 ms][INFO] === Request start === [2025-09-06 11:03:03][354551450108950][1 ms][DEBUG] START check_scloud [2025-09-06 11:03:03][354551450108950][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:03:04][354551450108950][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 10575 4970 25018448 153148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:03:04][354551450108950][291 ms][DEBUG] targetPkg: running [2025-09-06 11:03:04][354551450108950][291 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 11:03:04][354551450108950][291 ms][DEBUG] START check_boot_completed [2025-09-06 11:03:04][354551450108950][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:03:04][354551450108950][338 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:03:04][354551450108950][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:03:04][354551450108950][400 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 11:03:04][354551450108950][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:03:04][354551450108950][401 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:03:04][354551450108950][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354551450108950\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5551\"}'\'' -e'"" [2025-09-06 11:03:04][354551450108950][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:03:04][354551450108950][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354551450108950\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5551\"}'\'' -e'"" [2025-09-06 11:03:08][354551450108950][4603 ms][DEBUG] proc_open done in 4202 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 11:03:08][354551450108950][4603 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-06 11:03:08][354551450108950][4603 ms][WARN] Detected error: Process with pid 10575 either refused to load frida-agent, or terminated during injectionProcess with pid 10575 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 11:03:08][354551450108950][4603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 11:03:08][354551450108950][4868 ms][DEBUG] SU: done in 265 ms; outsystem 5387 4970 12686188 260476 ep_poll 0 S system_server\n [2025-09-06 11:03:08][354551450108950][4868 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 11:03:08][354551450108950][4993 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 11:03:08][354551450108950][4993 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 11:03:08][354551450108950][4994 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 11:03:08][354551450108950][5118 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 11:03:08][354551450108950][5118 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 11:03:09][354551450108950][5306 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 11:03:11][354551450108950][7320 ms][DEBUG] START check_boot_completed [2025-09-06 11:03:11][354551450108950][7321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:03:11][354551450108950][7367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:03:11][354551450108950][7367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:03:11][354551450108950][7414 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:03:11][354551450108950][7414 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 11:03:14][354551450108950][10429 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 11:03:14][354551450108950][10429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354551450108950\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5551\"}'\'' -e'"" [2025-09-06 11:03:18][354551450108950][14303 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46522662-c673-46d0-b71d-37dad237ec84","id":"QR_46522662-c673-46d0-b71d-37dad237ec84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:03:18][354551450108950][14459 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-06 11:03:18][354551450108950][14459 ms][DEBUG] END runCmdUntilRes#2 in 4030 ms [2025-09-06 11:03:18][354551450108950][14460 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:03:20][354551450108950][0 ms][INFO] === Request start === [2025-09-06 11:03:20][354551450108950][1 ms][DEBUG] START check_scloud [2025-09-06 11:03:20][354551450108950][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:03:20][354551450108950][253 ms][DEBUG] SU: done in 253 ms; outu0_a118 18426 4970 23745532 125416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:03:20][354551450108950][253 ms][DEBUG] targetPkg: running [2025-09-06 11:03:20][354551450108950][253 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 11:03:20][354551450108950][254 ms][DEBUG] START check_boot_completed [2025-09-06 11:03:20][354551450108950][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:03:20][354551450108950][300 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:03:20][354551450108950][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:03:20][354551450108950][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:03:20][354551450108950][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:03:20][354551450108950][347 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:03:20][354551450108950][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354551450108950\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2130\"}'\'' -e'"" [2025-09-06 11:03:20][354551450108950][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:03:20][354551450108950][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354551450108950\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2130\"}'\'' -e'"" [2025-09-06 11:03:26][354551450108950][5502 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c4e2290-a254-4060-a9bf-d60ef37788ab","id":"QR_7c4e2290-a254-4060-a9bf-d60ef37788ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:03:26][354551450108950][5658 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 11:03:26][354551450108950][5658 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 11:03:26][354551450108950][5658 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:08:03][356412387033696][0 ms][INFO] === Request start === [2025-09-06 11:08:03][356412387033696][1 ms][DEBUG] START check_scloud [2025-09-06 11:08:03][356412387033696][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:08:04][356412387033696][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 18426 4970 23819048 138848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:08:04][356412387033696][302 ms][DEBUG] targetPkg: running [2025-09-06 11:08:04][356412387033696][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 11:08:04][356412387033696][302 ms][DEBUG] START check_boot_completed [2025-09-06 11:08:04][356412387033696][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:08:04][356412387033696][332 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 11:08:04][356412387033696][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:08:04][356412387033696][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:08:04][356412387033696][379 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 11:08:04][356412387033696][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:08:04][356412387033696][488 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31207 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1578\nsuccessfulTxPacketsPerSecond: 0.12227461349758889\nretriedTxPackets: 219\nretriedTxPacketsPerSecond: 0.015284326687198611\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1592\nsuccessfulRxPacketsPerSecond: 0.1375589401847875\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:08:04][356412387033696][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:08:05][356412387033696][1894 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.354/303.354/303.354/0.000 ms\n [2025-09-06 11:08:05][356412387033696][1894 ms][DEBUG] check_internet: online [2025-09-06 11:08:05][356412387033696][1895 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:08:05][356412387033696][1895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356412387033696\",\"model\":\"SM-E146B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1877\"}'\'' -e'"" [2025-09-06 11:08:05][356412387033696][1895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:08:05][356412387033696][1895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356412387033696\",\"model\":\"SM-E146B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1877\"}'\'' -e'"" [2025-09-06 11:08:09][356412387033696][5643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d3ff95c-76d1-4ebd-8dad-03205d23c4ae","id":"QR_4d3ff95c-76d1-4ebd-8dad-03205d23c4ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:08:09][356412387033696][5799 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-09-06 11:08:09][356412387033696][5800 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-06 11:08:09][356412387033696][5800 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:08:11][356412387033696][0 ms][INFO] === Request start === [2025-09-06 11:08:11][356412387033696][1 ms][DEBUG] START check_scloud [2025-09-06 11:08:11][356412387033696][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:08:12][356412387033696][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 18426 4970 23984176 150916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:08:12][356412387033696][303 ms][DEBUG] targetPkg: running [2025-09-06 11:08:12][356412387033696][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 11:08:12][356412387033696][303 ms][DEBUG] START check_boot_completed [2025-09-06 11:08:12][356412387033696][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:08:12][356412387033696][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:08:12][356412387033696][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:08:12][356412387033696][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:08:12][356412387033696][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:08:12][356412387033696][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:08:12][356412387033696][505 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31207 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1578\nsuccessfulTxPacketsPerSecond: 0.12227461349758889\nretriedTxPackets: 219\nretriedTxPacketsPerSecond: 0.015284326687198611\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1592\nsuccessfulRxPacketsPerSecond: 0.1375589401847875\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:08:12][356412387033696][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:08:12][356412387033696][911 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.518/294.518/294.518/0.000 ms\n [2025-09-06 11:08:12][356412387033696][912 ms][DEBUG] check_internet: online [2025-09-06 11:08:12][356412387033696][912 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:08:12][356412387033696][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356412387033696\",\"model\":\"SM-E146B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2348\"}'\'' -e'"" [2025-09-06 11:08:12][356412387033696][912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:08:12][356412387033696][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356412387033696\",\"model\":\"SM-E146B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2348\"}'\'' -e'"" [2025-09-06 11:08:18][356412387033696][6160 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a75bb99d-813a-4ee9-a269-07e58362623b","id":"QR_a75bb99d-813a-4ee9-a269-07e58362623b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:08:18][356412387033696][6316 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-06 11:08:18][356412387033696][6316 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-06 11:08:18][356412387033696][6316 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:11:04][351024059568167][1 ms][INFO] === Request start === [2025-09-06 11:11:04][351024059568167][1 ms][DEBUG] START check_scloud [2025-09-06 11:11:04][351024059568167][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:11:05][351024059568167][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 18426 4970 24104240 162056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:11:05][351024059568167][304 ms][DEBUG] targetPkg: running [2025-09-06 11:11:05][351024059568167][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 11:11:05][351024059568167][304 ms][DEBUG] START check_boot_completed [2025-09-06 11:11:05][351024059568167][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:11:05][351024059568167][334 ms][DEBUG] ADB: done in 29 ms; out [2025-09-06 11:11:05][351024059568167][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:11:05][351024059568167][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:11:05][351024059568167][381 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-06 11:11:05][351024059568167][381 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:11:05][351024059568167][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351024059568167\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2889\"}'\'' -e'"" [2025-09-06 11:11:05][351024059568167][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:11:05][351024059568167][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351024059568167\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2889\"}'\'' -e'"" [2025-09-06 11:11:10][351024059568167][6207 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50cc510d-027b-4ab8-85cf-b2723d8a03ab","id":"QR_50cc510d-027b-4ab8-85cf-b2723d8a03ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:11:11][351024059568167][6364 ms][DEBUG] proc_open done in 5983 ms; code=255; res.len=3343 [2025-09-06 11:11:11][351024059568167][6364 ms][DEBUG] END runCmdUntilRes#1 in 5983 ms [2025-09-06 11:11:11][351024059568167][6364 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:11:14][351024059568167][0 ms][INFO] === Request start === [2025-09-06 11:11:14][351024059568167][1 ms][DEBUG] START check_scloud [2025-09-06 11:11:14][351024059568167][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:11:14][351024059568167][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 18426 4970 24241592 172748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:11:14][351024059568167][258 ms][DEBUG] targetPkg: running [2025-09-06 11:11:14][351024059568167][258 ms][DEBUG] END check_scloud in 258 ms [2025-09-06 11:11:14][351024059568167][258 ms][DEBUG] START check_boot_completed [2025-09-06 11:11:14][351024059568167][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:11:14][351024059568167][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:11:14][351024059568167][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:11:14][351024059568167][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:11:14][351024059568167][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:11:14][351024059568167][352 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:11:14][351024059568167][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351024059568167\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7093\"}'\'' -e'"" [2025-09-06 11:11:14][351024059568167][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:11:14][351024059568167][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351024059568167\",\"model\":\"SM-A536U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7093\"}'\'' -e'"" [2025-09-06 11:11:18][351024059568167][4132 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b80120e6-75f6-490f-9fe4-550f486ab610","id":"QR_b80120e6-75f6-490f-9fe4-550f486ab610","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:11:18][351024059568167][4288 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-09-06 11:11:18][351024059568167][4288 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-09-06 11:11:18][351024059568167][4288 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:19:04][353809895024781][1 ms][INFO] === Request start === [2025-09-06 11:19:04][353809895024781][1 ms][DEBUG] START check_scloud [2025-09-06 11:19:04][353809895024781][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:19:04][353809895024781][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 18426 4970 24350252 185192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:19:04][353809895024781][295 ms][DEBUG] targetPkg: running [2025-09-06 11:19:04][353809895024781][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 11:19:04][353809895024781][295 ms][DEBUG] START check_boot_completed [2025-09-06 11:19:04][353809895024781][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:19:04][353809895024781][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:19:04][353809895024781][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:19:04][353809895024781][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:19:04][353809895024781][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 11:19:04][353809895024781][374 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:19:04][353809895024781][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809895024781\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7584\"}'\'' -e'"" [2025-09-06 11:19:04][353809895024781][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:19:04][353809895024781][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809895024781\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7584\"}'\'' -e'"" [2025-09-06 11:19:09][353809895024781][5075 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4a92045-eab1-4a4e-9605-af19a67e66ce","id":"QR_a4a92045-eab1-4a4e-9605-af19a67e66ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:19:09][353809895024781][5232 ms][DEBUG] proc_open done in 4857 ms; code=255; res.len=3343 [2025-09-06 11:19:09][353809895024781][5232 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-06 11:19:09][353809895024781][5232 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:19:11][353809895024781][0 ms][INFO] === Request start === [2025-09-06 11:19:11][353809895024781][1 ms][DEBUG] START check_scloud [2025-09-06 11:19:11][353809895024781][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:19:12][353809895024781][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 18426 4970 24528768 195984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:19:12][353809895024781][299 ms][DEBUG] targetPkg: running [2025-09-06 11:19:12][353809895024781][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 11:19:12][353809895024781][299 ms][DEBUG] START check_boot_completed [2025-09-06 11:19:12][353809895024781][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:19:12][353809895024781][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:19:12][353809895024781][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:19:12][353809895024781][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:19:12][353809895024781][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:19:12][353809895024781][408 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:19:12][353809895024781][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809895024781\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2650\"}'\'' -e'"" [2025-09-06 11:19:12][353809895024781][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:19:12][353809895024781][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809895024781\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2650\"}'\'' -e'"" [2025-09-06 11:19:16][353809895024781][5250 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f818c4e6-3961-476d-b029-cc43fe0ae030","id":"QR_f818c4e6-3961-476d-b029-cc43fe0ae030","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:19:17][353809895024781][5406 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-06 11:19:17][353809895024781][5407 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-06 11:19:17][353809895024781][5407 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:23:03][358619998726157][1 ms][INFO] === Request start === [2025-09-06 11:23:03][358619998726157][1 ms][DEBUG] START check_scloud [2025-09-06 11:23:03][358619998726157][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:23:04][358619998726157][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18426 4970 24672832 207436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:23:04][358619998726157][308 ms][DEBUG] targetPkg: running [2025-09-06 11:23:04][358619998726157][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 11:23:04][358619998726157][308 ms][DEBUG] START check_boot_completed [2025-09-06 11:23:04][358619998726157][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:23:04][358619998726157][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:23:04][358619998726157][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:23:04][358619998726157][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:23:04][358619998726157][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 11:23:04][358619998726157][386 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:23:04][358619998726157][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358619998726157\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6357\"}'\'' -e'"" [2025-09-06 11:23:04][358619998726157][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:23:04][358619998726157][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358619998726157\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6357\"}'\'' -e'"" [2025-09-06 11:23:08][358619998726157][5057 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97455501-d130-4112-8370-d43af9a637f6","id":"QR_97455501-d130-4112-8370-d43af9a637f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:23:08][358619998726157][5213 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-06 11:23:08][358619998726157][5213 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-06 11:23:08][358619998726157][5213 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:23:11][358619998726157][1 ms][INFO] === Request start === [2025-09-06 11:23:11][358619998726157][1 ms][DEBUG] START check_scloud [2025-09-06 11:23:11][358619998726157][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:23:11][358619998726157][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 18426 4970 24805192 218176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:23:11][358619998726157][322 ms][DEBUG] targetPkg: running [2025-09-06 11:23:11][358619998726157][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-06 11:23:11][358619998726157][322 ms][DEBUG] START check_boot_completed [2025-09-06 11:23:11][358619998726157][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:23:11][358619998726157][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:23:11][358619998726157][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:23:11][358619998726157][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:23:11][358619998726157][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:23:11][358619998726157][432 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:23:11][358619998726157][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358619998726157\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3607\"}'\'' -e'"" [2025-09-06 11:23:11][358619998726157][432 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:23:11][358619998726157][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358619998726157\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3607\"}'\'' -e'"" [2025-09-06 11:23:16][358619998726157][5430 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab1f2ee8-7588-4b8f-95e6-d468c5807ee3","id":"QR_ab1f2ee8-7588-4b8f-95e6-d468c5807ee3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:23:16][358619998726157][5586 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-06 11:23:16][358619998726157][5586 ms][DEBUG] END runCmdUntilRes#1 in 5154 ms [2025-09-06 11:23:16][358619998726157][5586 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:23:21][353074282911831][0 ms][INFO] === Request start === [2025-09-06 11:23:21][353074282911831][1 ms][DEBUG] START check_scloud [2025-09-06 11:23:21][353074282911831][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:23:21][353074282911831][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 18426 4970 24929296 228768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:23:21][353074282911831][267 ms][DEBUG] targetPkg: running [2025-09-06 11:23:21][353074282911831][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-06 11:23:21][353074282911831][267 ms][DEBUG] START check_boot_completed [2025-09-06 11:23:21][353074282911831][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:23:21][353074282911831][314 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:23:21][353074282911831][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:23:21][353074282911831][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:23:21][353074282911831][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:23:21][353074282911831][361 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:23:21][353074282911831][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074282911831\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6087\"}'\'' -e'"" [2025-09-06 11:23:21][353074282911831][361 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:23:21][353074282911831][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074282911831\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6087\"}'\'' -e'"" [2025-09-06 11:23:24][353074282911831][3828 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_965b3f63-3af5-4a4b-b7ff-6aa5ae8102f7","id":"QR_965b3f63-3af5-4a4b-b7ff-6aa5ae8102f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:23:25][353074282911831][3985 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-06 11:23:25][353074282911831][3985 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-06 11:23:25][353074282911831][3985 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:23:27][353074282911831][0 ms][INFO] === Request start === [2025-09-06 11:23:27][353074282911831][1 ms][DEBUG] START check_scloud [2025-09-06 11:23:27][353074282911831][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:23:27][353074282911831][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 18426 4970 25041144 239920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:23:27][353074282911831][311 ms][DEBUG] targetPkg: running [2025-09-06 11:23:27][353074282911831][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 11:23:27][353074282911831][311 ms][DEBUG] START check_boot_completed [2025-09-06 11:23:27][353074282911831][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:23:27][353074282911831][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:23:27][353074282911831][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:23:27][353074282911831][436 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 11:23:27][353074282911831][436 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 11:23:27][353074282911831][436 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:23:27][353074282911831][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074282911831\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2172\"}'\'' -e'"" [2025-09-06 11:23:27][353074282911831][436 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:23:27][353074282911831][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074282911831\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2172\"}'\'' -e'"" [2025-09-06 11:23:35][353074282911831][8528 ms][DEBUG] proc_open done in 8092 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 11:23:35][353074282911831][8528 ms][DEBUG] END runCmdUntilRes#1 in 8092 ms [2025-09-06 11:23:35][353074282911831][8528 ms][WARN] Detected error: Process with pid 18426 either refused to load frida-agent, or terminated during injectionProcess with pid 18426 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 11:23:35][353074282911831][8528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 11:23:36][353074282911831][9043 ms][DEBUG] SU: done in 515 ms; out [2025-09-06 11:23:36][353074282911831][9043 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 11:23:36][353074282911831][9480 ms][DEBUG] SU: done in 437 ms; out [2025-09-06 11:23:36][353074282911831][9480 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 11:23:36][353074282911831][9480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 11:23:37][353074282911831][9730 ms][DEBUG] SU: done in 250 ms; out [2025-09-06 11:23:37][353074282911831][9730 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 11:23:37][353074282911831][10027 ms][DEBUG] SU: done in 297 ms; out [2025-09-06 11:23:39][353074282911831][12042 ms][DEBUG] START check_boot_completed [2025-09-06 11:23:39][353074282911831][12042 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:23:39][353074282911831][12089 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:23:39][353074282911831][12089 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:23:39][353074282911831][12151 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:23:39][353074282911831][12151 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:23:42][353074282911831][15166 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 11:23:42][353074282911831][15166 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074282911831\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2172\"}'\'' -e'"" [2025-09-06 11:23:44][353074282911831][16869 ms][DEBUG] proc_open done in 1703 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-06 11:23:44][353074282911831][16869 ms][DEBUG] END runCmdUntilRes#2 in 1703 ms [2025-09-06 11:23:44][353074282911831][16869 ms][WARN] Detected error 2; Reboot the device [2025-09-06 11:23:44][353074282911831][16870 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 11:23:44][353074282911831][17150 ms][DEBUG] SU: done in 281 ms; outsystem 20616 20277 7938820 161824 futex_wait_queue_me 0 S system_server\n [2025-09-06 11:23:44][353074282911831][17150 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-06 11:23:45][353074282911831][17853 ms][DEBUG] SU: done in 703 ms; out [2025-09-06 11:24:04][355418871504895][0 ms][INFO] === Request start === [2025-09-06 11:24:04][355418871504895][1 ms][DEBUG] START check_scloud [2025-09-06 11:24:04][355418871504895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:24:04][355418871504895][43 ms][DEBUG] SU: done in 42 ms; out [2025-09-06 11:24:04][355418871504895][43 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 11:24:04][355418871504895][75 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 11:24:04][355418871504895][75 ms][WARN] check_devices: no device [2025-09-06 11:24:04][355418871504895][75 ms][WARN] check_devices: no device [2025-09-06 11:24:04][355418871504895][75 ms][DEBUG] END check_scloud in 74 ms [2025-09-06 11:25:03][355418871504895][0 ms][INFO] === Request start === [2025-09-06 11:25:03][355418871504895][1 ms][DEBUG] START check_scloud [2025-09-06 11:25:03][355418871504895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:25:03][355418871504895][360 ms][DEBUG] SU: done in 359 ms; out [2025-09-06 11:25:03][355418871504895][360 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 11:25:03][355418871504895][391 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 11:25:03][355418871504895][391 ms][DEBUG] check_devices: device found [2025-09-06 11:25:03][355418871504895][391 ms][WARN] targetPkg: not running, restarting [2025-09-06 11:25:03][355418871504895][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 11:25:03][355418871504895][532 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 11:25:03][355418871504895][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 11:25:04][355418871504895][781 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 11:25:06][355418871504895][2796 ms][DEBUG] END check_scloud in 2796 ms [2025-09-06 11:25:06][355418871504895][2796 ms][DEBUG] START check_boot_completed [2025-09-06 11:25:06][355418871504895][2797 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:25:06][355418871504895][2843 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:25:06][355418871504895][2843 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:25:06][355418871504895][2906 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:25:06][355418871504895][2906 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:25:06][355418871504895][2906 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:25:06][355418871504895][2906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355418871504895\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5083\"}'\'' -e'"" [2025-09-06 11:25:06][355418871504895][2906 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:25:06][355418871504895][2906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355418871504895\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5083\"}'\'' -e'"" [2025-09-06 11:25:12][355418871504895][9201 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1493723-df6a-4b33-950d-82991ba17440","id":"QR_a1493723-df6a-4b33-950d-82991ba17440","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:25:12][355418871504895][9357 ms][DEBUG] proc_open done in 6451 ms; code=255; res.len=3343 [2025-09-06 11:25:12][355418871504895][9357 ms][DEBUG] END runCmdUntilRes#1 in 6451 ms [2025-09-06 11:25:12][355418871504895][9358 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:25:15][355418871504895][1 ms][INFO] === Request start === [2025-09-06 11:25:15][355418871504895][1 ms][DEBUG] START check_scloud [2025-09-06 11:25:15][355418871504895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:25:15][355418871504895][354 ms][DEBUG] SU: done in 353 ms; outu0_a118 9026 4974 23539748 105828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:25:15][355418871504895][354 ms][DEBUG] targetPkg: running [2025-09-06 11:25:15][355418871504895][354 ms][DEBUG] END check_scloud in 353 ms [2025-09-06 11:25:15][355418871504895][354 ms][DEBUG] START check_boot_completed [2025-09-06 11:25:15][355418871504895][354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:25:15][355418871504895][385 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:25:15][355418871504895][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:25:15][355418871504895][448 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 11:25:15][355418871504895][448 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 11:25:15][355418871504895][448 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:25:15][355418871504895][448 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355418871504895\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6637\"}'\'' -e'"" [2025-09-06 11:25:15][355418871504895][448 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:25:15][355418871504895][448 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355418871504895\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6637\"}'\'' -e'"" [2025-09-06 11:25:22][355418871504895][7321 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9fd30f3-0905-44fa-a1eb-a689ecd90d5c","id":"QR_d9fd30f3-0905-44fa-a1eb-a689ecd90d5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:25:22][355418871504895][7477 ms][DEBUG] proc_open done in 7029 ms; code=255; res.len=3343 [2025-09-06 11:25:22][355418871504895][7477 ms][DEBUG] END runCmdUntilRes#1 in 7029 ms [2025-09-06 11:25:22][355418871504895][7477 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:27:03][352469859958424][0 ms][INFO] === Request start === [2025-09-06 11:27:03][352469859958424][1 ms][DEBUG] START check_scloud [2025-09-06 11:27:03][352469859958424][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:27:03][352469859958424][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 9026 4974 23638940 64352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:27:03][352469859958424][290 ms][DEBUG] targetPkg: running [2025-09-06 11:27:03][352469859958424][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-06 11:27:03][352469859958424][290 ms][DEBUG] START check_boot_completed [2025-09-06 11:27:03][352469859958424][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:27:03][352469859958424][337 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:27:03][352469859958424][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:27:03][352469859958424][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:27:03][352469859958424][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:27:03][352469859958424][384 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:27:03][352469859958424][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859958424\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3111\"}'\'' -e'"" [2025-09-06 11:27:03][352469859958424][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:27:03][352469859958424][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859958424\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3111\"}'\'' -e'"" [2025-09-06 11:27:08][352469859958424][5320 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 11:27:08][352469859958424][5476 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=115 [2025-09-06 11:27:08][352469859958424][5476 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-06 11:27:08][352469859958424][5476 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 11:27:09][][0 ms][INFO] === Request start === [2025-09-06 11:27:09][][1 ms][DEBUG] START check_scloud [2025-09-06 11:27:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:27:09][][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 9026 4974 23770072 78696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:27:09][][293 ms][DEBUG] targetPkg: running [2025-09-06 11:27:09][][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-06 11:27:09][][293 ms][DEBUG] START check_boot_completed [2025-09-06 11:27:09][][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:27:09][][339 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:27:09][][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:27:09][][402 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:27:09][][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:27:09][][402 ms][DEBUG] rawBody.length=1131 [2025-09-06 11:27:09][][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T80SPHKB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2460\"}'\'' -e'"" [2025-09-06 11:27:09][][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:27:09][][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T80SPHKB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2460\"}'\'' -e'"" [2025-09-06 11:27:12][][3698 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-06 11:27:13][][3854 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=95 [2025-09-06 11:27:13][][3854 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-06 11:27:13][][3854 ms][INFO] SUCCESS response from frida (len=95) [2025-09-06 11:27:14][352469859958424][0 ms][INFO] === Request start === [2025-09-06 11:27:14][352469859958424][1 ms][DEBUG] START check_scloud [2025-09-06 11:27:14][352469859958424][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:27:15][352469859958424][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 9026 4974 23918688 95008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:27:15][352469859958424][332 ms][DEBUG] targetPkg: running [2025-09-06 11:27:15][352469859958424][332 ms][DEBUG] END check_scloud in 331 ms [2025-09-06 11:27:15][352469859958424][332 ms][DEBUG] START check_boot_completed [2025-09-06 11:27:15][352469859958424][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:27:15][352469859958424][363 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:27:15][352469859958424][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:27:15][352469859958424][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:27:15][352469859958424][410 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 11:27:15][352469859958424][410 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:27:15][352469859958424][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859958424\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9622\"}'\'' -e'"" [2025-09-06 11:27:15][352469859958424][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:27:15][352469859958424][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859958424\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9622\"}'\'' -e'"" [2025-09-06 11:27:19][352469859958424][4315 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 11:27:19][352469859958424][4472 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=115 [2025-09-06 11:27:19][352469859958424][4472 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-06 11:27:19][352469859958424][4472 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 11:27:19][][1 ms][INFO] === Request start === [2025-09-06 11:27:19][][1 ms][DEBUG] START check_scloud [2025-09-06 11:27:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:27:19][][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 9026 4974 24094120 105908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:27:19][][307 ms][DEBUG] targetPkg: running [2025-09-06 11:27:19][][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 11:27:19][][307 ms][DEBUG] START check_boot_completed [2025-09-06 11:27:19][][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:27:19][][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:27:19][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:27:19][][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:27:19][][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:27:19][][400 ms][DEBUG] rawBody.length=1141 [2025-09-06 11:27:19][][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58T80SPHKB\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6102\"}'\'' -e'"" [2025-09-06 11:27:19][][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:27:19][][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58T80SPHKB\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6102\"}'\'' -e'"" [2025-09-06 11:27:24][][4727 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-06 11:27:24][][4884 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=95 [2025-09-06 11:27:24][][4884 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-06 11:27:24][][4884 ms][INFO] SUCCESS response from frida (len=95) [2025-09-06 11:28:03][358184571978204][0 ms][INFO] === Request start === [2025-09-06 11:28:03][358184571978204][1 ms][DEBUG] START check_scloud [2025-09-06 11:28:03][358184571978204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:28:03][358184571978204][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 9026 4974 24203808 117588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:28:03][358184571978204][317 ms][DEBUG] targetPkg: running [2025-09-06 11:28:03][358184571978204][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 11:28:03][358184571978204][317 ms][DEBUG] START check_boot_completed [2025-09-06 11:28:03][358184571978204][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:28:03][358184571978204][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:28:03][358184571978204][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:28:03][358184571978204][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:28:03][358184571978204][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 11:28:03][358184571978204][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:28:03][358184571978204][551 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 346\nsuccessfulTxPacketsPerSecond: 16.10045393844396\nretriedTxPackets: 40\nretriedTxPacketsPerSecond: 2.1529676778151807\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 299\nsuccessfulRxPacketsPerSecond: 12.730591486211503\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:28:03][358184571978204][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:28:05][358184571978204][2238 ms][DEBUG] SU: done in 1687 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.987/299.987/299.987/0.000 ms\n [2025-09-06 11:28:05][358184571978204][2238 ms][DEBUG] check_internet: online [2025-09-06 11:28:05][358184571978204][2238 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:28:05][358184571978204][2238 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184571978204\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8445\"}'\'' -e'"" [2025-09-06 11:28:05][358184571978204][2238 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:28:05][358184571978204][2239 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184571978204\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8445\"}'\'' -e'"" [2025-09-06 11:28:09][358184571978204][6065 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_608c4d1f-339f-448b-a77b-938db558bf16","id":"QR_608c4d1f-339f-448b-a77b-938db558bf16","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:28:09][358184571978204][6221 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-06 11:28:09][358184571978204][6221 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-06 11:28:09][358184571978204][6221 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:28:11][358184571978204][0 ms][INFO] === Request start === [2025-09-06 11:28:11][358184571978204][1 ms][DEBUG] START check_scloud [2025-09-06 11:28:11][358184571978204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:28:12][358184571978204][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 9026 4974 24360744 129652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:28:12][358184571978204][299 ms][DEBUG] targetPkg: running [2025-09-06 11:28:12][358184571978204][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 11:28:12][358184571978204][299 ms][DEBUG] START check_boot_completed [2025-09-06 11:28:12][358184571978204][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:28:12][358184571978204][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:28:12][358184571978204][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:28:12][358184571978204][424 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 11:28:12][358184571978204][424 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 11:28:12][358184571978204][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:28:12][358184571978204][549 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 346\nsuccessfulTxPacketsPerSecond: 16.10045393844396\nretriedTxPackets: 40\nretriedTxPacketsPerSecond: 2.1529676778151807\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 299\nsuccessfulRxPacketsPerSecond: 12.730591486211503\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:28:12][358184571978204][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:28:12][358184571978204][892 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.585/228.585/228.585/0.000 ms\n [2025-09-06 11:28:12][358184571978204][892 ms][DEBUG] check_internet: online [2025-09-06 11:28:12][358184571978204][892 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:28:12][358184571978204][892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184571978204\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8826\"}'\'' -e'"" [2025-09-06 11:28:12][358184571978204][892 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:28:12][358184571978204][892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184571978204\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8826\"}'\'' -e'"" [2025-09-06 11:28:17][358184571978204][5750 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85798522-df1f-4bdb-bdc1-049757415ba3","id":"QR_85798522-df1f-4bdb-bdc1-049757415ba3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:28:17][358184571978204][5906 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 11:28:17][358184571978204][5907 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 11:28:17][358184571978204][5907 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:31:03][350482800980175][1 ms][INFO] === Request start === [2025-09-06 11:31:03][350482800980175][1 ms][DEBUG] START check_scloud [2025-09-06 11:31:03][350482800980175][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:31:03][350482800980175][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 9026 4974 24488808 140672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:31:03][350482800980175][316 ms][DEBUG] targetPkg: running [2025-09-06 11:31:03][350482800980175][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 11:31:03][350482800980175][316 ms][DEBUG] START check_boot_completed [2025-09-06 11:31:03][350482800980175][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:31:03][350482800980175][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:31:03][350482800980175][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:31:04][350482800980175][426 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 11:31:04][350482800980175][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:31:04][350482800980175][426 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:31:04][350482800980175][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482800980175\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8811\"}'\'' -e'"" [2025-09-06 11:31:04][350482800980175][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:31:04][350482800980175][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482800980175\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8811\"}'\'' -e'"" [2025-09-06 11:31:08][350482800980175][5237 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8885c68-5090-42ef-bf50-25a672bdc1cc","id":"QR_a8885c68-5090-42ef-bf50-25a672bdc1cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:31:09][350482800980175][5393 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-06 11:31:09][350482800980175][5393 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-09-06 11:31:09][350482800980175][5393 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:31:11][350482800980175][0 ms][INFO] === Request start === [2025-09-06 11:31:11][350482800980175][1 ms][DEBUG] START check_scloud [2025-09-06 11:31:11][350482800980175][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:31:11][350482800980175][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 9026 4974 24645744 151272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:31:11][350482800980175][297 ms][DEBUG] targetPkg: running [2025-09-06 11:31:11][350482800980175][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 11:31:11][350482800980175][297 ms][DEBUG] START check_boot_completed [2025-09-06 11:31:11][350482800980175][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:31:11][350482800980175][326 ms][DEBUG] ADB: done in 29 ms; out [2025-09-06 11:31:11][350482800980175][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:31:11][350482800980175][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 11:31:11][350482800980175][389 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 11:31:11][350482800980175][389 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:31:11][350482800980175][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482800980175\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3678\"}'\'' -e'"" [2025-09-06 11:31:11][350482800980175][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:31:11][350482800980175][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482800980175\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3678\"}'\'' -e'"" [2025-09-06 11:31:16][350482800980175][5481 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_141d55d0-f1b4-4aec-8b6f-9812216eb589","id":"QR_141d55d0-f1b4-4aec-8b6f-9812216eb589","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:31:16][350482800980175][5638 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-06 11:31:16][350482800980175][5638 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-06 11:31:16][350482800980175][5638 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:34:03][357967975610485][1 ms][INFO] === Request start === [2025-09-06 11:34:03][357967975610485][1 ms][DEBUG] START check_scloud [2025-09-06 11:34:03][357967975610485][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:34:04][357967975610485][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 9026 4974 24755376 162620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:34:04][357967975610485][298 ms][DEBUG] targetPkg: running [2025-09-06 11:34:04][357967975610485][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 11:34:04][357967975610485][298 ms][DEBUG] START check_boot_completed [2025-09-06 11:34:04][357967975610485][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:34:04][357967975610485][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:34:04][357967975610485][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:34:04][357967975610485][392 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 11:34:04][357967975610485][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 11:34:04][357967975610485][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:34:04][357967975610485][533 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1103\nsuccessfulTxPacketsPerSecond: 2.7657918677681117\nretriedTxPackets: 135\nretriedTxPacketsPerSecond: 0.3470940917278344\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1085\nsuccessfulRxPacketsPerSecond: 2.8717469062955563\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:34:04][357967975610485][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:34:05][357967975610485][1767 ms][DEBUG] SU: done in 1234 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.479/221.479/221.479/0.000 ms\n [2025-09-06 11:34:05][357967975610485][1767 ms][DEBUG] check_internet: online [2025-09-06 11:34:05][357967975610485][1767 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:34:05][357967975610485][1767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975610485\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9666\"}'\'' -e'"" [2025-09-06 11:34:05][357967975610485][1767 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:34:05][357967975610485][1767 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975610485\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9666\"}'\'' -e'"" [2025-09-06 11:34:09][357967975610485][5500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15d5eb55-d825-4abc-b458-05be1595851e","id":"QR_15d5eb55-d825-4abc-b458-05be1595851e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:34:09][357967975610485][5656 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-09-06 11:34:09][357967975610485][5657 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-06 11:34:09][357967975610485][5657 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:34:11][357967975610485][0 ms][INFO] === Request start === [2025-09-06 11:34:11][357967975610485][1 ms][DEBUG] START check_scloud [2025-09-06 11:34:11][357967975610485][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:34:12][357967975610485][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 9026 4974 24895932 174552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:34:12][357967975610485][316 ms][DEBUG] targetPkg: running [2025-09-06 11:34:12][357967975610485][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 11:34:12][357967975610485][316 ms][DEBUG] START check_boot_completed [2025-09-06 11:34:12][357967975610485][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:34:12][357967975610485][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:34:12][357967975610485][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:34:12][357967975610485][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:34:12][357967975610485][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:34:12][357967975610485][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:34:12][357967975610485][566 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1103\nsuccessfulTxPacketsPerSecond: 2.7657918677681117\nretriedTxPackets: 135\nretriedTxPacketsPerSecond: 0.3470940917278344\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1085\nsuccessfulRxPacketsPerSecond: 2.8717469062955563\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:34:12][357967975610485][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:34:12][357967975610485][1066 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=332 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 332.328/332.328/332.328/0.000 ms\n [2025-09-06 11:34:12][357967975610485][1066 ms][DEBUG] check_internet: online [2025-09-06 11:34:12][357967975610485][1066 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:34:12][357967975610485][1066 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975610485\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5783\"}'\'' -e'"" [2025-09-06 11:34:12][357967975610485][1066 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:34:12][357967975610485][1067 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975610485\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5783\"}'\'' -e'"" [2025-09-06 11:34:17][357967975610485][5533 ms][DEBUG] proc_open done in 4467 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 11:34:17][357967975610485][5534 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-09-06 11:34:17][357967975610485][5534 ms][WARN] Detected error: Process with pid 9026 either refused to load frida-agent, or terminated during injectionProcess with pid 9026 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 11:34:17][357967975610485][5534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 11:34:17][357967975610485][5815 ms][DEBUG] SU: done in 281 ms; outsystem 5392 4974 13005840 571012 ep_poll 0 S system_server\n [2025-09-06 11:34:17][357967975610485][5815 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 11:34:17][357967975610485][5955 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 11:34:17][357967975610485][5956 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 11:34:17][357967975610485][5956 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 11:34:17][357967975610485][6096 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 11:34:17][357967975610485][6096 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 11:34:18][357967975610485][6299 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 11:34:20][357967975610485][8314 ms][DEBUG] START check_boot_completed [2025-09-06 11:34:20][357967975610485][8314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:34:20][357967975610485][8361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:34:20][357967975610485][8361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:34:20][357967975610485][8408 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:34:20][357967975610485][8408 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 11:34:23][357967975610485][11423 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 11:34:23][357967975610485][11423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975610485\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5783\"}'\'' -e'"" [2025-09-06 11:34:28][357967975610485][16531 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_545b75c7-6275-48a1-b487-0ab158e094c2","id":"QR_545b75c7-6275-48a1-b487-0ab158e094c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:34:28][357967975610485][16687 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-06 11:34:28][357967975610485][16687 ms][DEBUG] END runCmdUntilRes#2 in 5264 ms [2025-09-06 11:34:28][357967975610485][16687 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:34:32][357358143430123][0 ms][INFO] === Request start === [2025-09-06 11:34:32][357358143430123][0 ms][DEBUG] START check_scloud [2025-09-06 11:34:32][357358143430123][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:34:32][357358143430123][245 ms][DEBUG] SU: done in 245 ms; outu0_a118 18090 4974 23568032 125148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:34:32][357358143430123][245 ms][DEBUG] targetPkg: running [2025-09-06 11:34:32][357358143430123][245 ms][DEBUG] END check_scloud in 245 ms [2025-09-06 11:34:32][357358143430123][245 ms][DEBUG] START check_boot_completed [2025-09-06 11:34:32][357358143430123][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:34:33][357358143430123][292 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:34:33][357358143430123][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:34:33][357358143430123][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:34:33][357358143430123][339 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 11:34:33][357358143430123][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:34:33][357358143430123][448 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1103\nsuccessfulTxPacketsPerSecond: 2.7657918677681117\nretriedTxPackets: 135\nretriedTxPacketsPerSecond: 0.3470940917278344\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1085\nsuccessfulRxPacketsPerSecond: 2.8717469062955563\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:34:33][357358143430123][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:34:33][357358143430123][886 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=332 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 332.193/332.193/332.193/0.000 ms\n [2025-09-06 11:34:33][357358143430123][886 ms][DEBUG] check_internet: online [2025-09-06 11:34:33][357358143430123][886 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:34:33][357358143430123][886 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357358143430123\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3606\"}'\'' -e'"" [2025-09-06 11:34:33][357358143430123][887 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:34:33][357358143430123][887 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357358143430123\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3606\"}'\'' -e'"" [2025-09-06 11:34:37][357358143430123][4463 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9b6b639-70a9-4064-8e4c-f0b79fcd74a3","id":"QR_e9b6b639-70a9-4064-8e4c-f0b79fcd74a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:34:37][357358143430123][4619 ms][DEBUG] proc_open done in 3732 ms; code=255; res.len=3343 [2025-09-06 11:34:37][357358143430123][4619 ms][DEBUG] END runCmdUntilRes#1 in 3732 ms [2025-09-06 11:34:37][357358143430123][4619 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:34:39][357358143430123][0 ms][INFO] === Request start === [2025-09-06 11:34:39][357358143430123][1 ms][DEBUG] START check_scloud [2025-09-06 11:34:39][357358143430123][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:34:39][357358143430123][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 18090 4974 23726068 138684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:34:39][357358143430123][299 ms][DEBUG] targetPkg: running [2025-09-06 11:34:39][357358143430123][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 11:34:39][357358143430123][299 ms][DEBUG] START check_boot_completed [2025-09-06 11:34:39][357358143430123][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:34:40][357358143430123][330 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:34:40][357358143430123][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:34:40][357358143430123][378 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 11:34:40][357358143430123][378 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 11:34:40][357358143430123][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:34:40][357358143430123][502 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1103\nsuccessfulTxPacketsPerSecond: 2.7657918677681117\nretriedTxPackets: 135\nretriedTxPacketsPerSecond: 0.3470940917278344\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1085\nsuccessfulRxPacketsPerSecond: 2.8717469062955563\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:34:40][357358143430123][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:34:40][357358143430123][908 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.067/301.067/301.067/0.000 ms\n [2025-09-06 11:34:40][357358143430123][908 ms][DEBUG] check_internet: online [2025-09-06 11:34:40][357358143430123][909 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:34:40][357358143430123][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357358143430123\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3765\"}'\'' -e'"" [2025-09-06 11:34:40][357358143430123][909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:34:40][357358143430123][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357358143430123\",\"model\":\"SM-X216B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3765\"}'\'' -e'"" [2025-09-06 11:34:45][357358143430123][5751 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37a4249e-4153-4b42-82a8-64dd3bd11186","id":"QR_37a4249e-4153-4b42-82a8-64dd3bd11186","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:34:45][357358143430123][5907 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-06 11:34:45][357358143430123][5907 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-06 11:34:45][357358143430123][5907 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:38:03][350616254859415][1 ms][INFO] === Request start === [2025-09-06 11:38:03][350616254859415][1 ms][DEBUG] START check_scloud [2025-09-06 11:38:03][350616254859415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:38:04][350616254859415][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 18090 4974 23755504 150896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:38:04][350616254859415][283 ms][DEBUG] targetPkg: running [2025-09-06 11:38:04][350616254859415][284 ms][DEBUG] END check_scloud in 282 ms [2025-09-06 11:38:04][350616254859415][284 ms][DEBUG] START check_boot_completed [2025-09-06 11:38:04][350616254859415][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:38:04][350616254859415][314 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:38:04][350616254859415][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:38:04][350616254859415][377 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 11:38:04][350616254859415][377 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 11:38:04][350616254859415][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:38:04][350616254859415][503 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1337\nsuccessfulTxPacketsPerSecond: 0.7768279525271807\nretriedTxPackets: 202\nretriedTxPacketsPerSecond: 0.22242509751846626\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1282\nsuccessfulRxPacketsPerSecond: 0.6539961822557888\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:38:04][350616254859415][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:38:04][350616254859415][924 ms][DEBUG] SU: done in 420 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.906/316.906/316.906/0.000 ms\n [2025-09-06 11:38:04][350616254859415][924 ms][DEBUG] check_internet: online [2025-09-06 11:38:04][350616254859415][924 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:38:04][350616254859415][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616254859415\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9998\"}'\'' -e'"" [2025-09-06 11:38:04][350616254859415][924 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:38:04][350616254859415][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616254859415\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9998\"}'\'' -e'"" [2025-09-06 11:38:10][350616254859415][6500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d8b52d3-c5ba-4f65-a5d3-089229dd3a12","id":"QR_6d8b52d3-c5ba-4f65-a5d3-089229dd3a12","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:38:10][350616254859415][6657 ms][DEBUG] proc_open done in 5732 ms; code=255; res.len=3343 [2025-09-06 11:38:10][350616254859415][6657 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-09-06 11:38:10][350616254859415][6657 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:38:12][350616254859415][0 ms][INFO] === Request start === [2025-09-06 11:38:12][350616254859415][1 ms][DEBUG] START check_scloud [2025-09-06 11:38:12][350616254859415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:38:13][350616254859415][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 18090 4974 23897976 161968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:38:13][350616254859415][304 ms][DEBUG] targetPkg: running [2025-09-06 11:38:13][350616254859415][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 11:38:13][350616254859415][305 ms][DEBUG] START check_boot_completed [2025-09-06 11:38:13][350616254859415][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:38:13][350616254859415][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:38:13][350616254859415][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:38:13][350616254859415][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:38:13][350616254859415][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:38:13][350616254859415][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:38:13][350616254859415][523 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1337\nsuccessfulTxPacketsPerSecond: 0.7768279525271807\nretriedTxPackets: 202\nretriedTxPacketsPerSecond: 0.22242509751846626\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1282\nsuccessfulRxPacketsPerSecond: 0.6539961822557888\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:38:13][350616254859415][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:38:13][350616254859415][945 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=319 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 319.458/319.458/319.458/0.000 ms\n [2025-09-06 11:38:13][350616254859415][945 ms][DEBUG] check_internet: online [2025-09-06 11:38:13][350616254859415][945 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:38:13][350616254859415][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616254859415\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2393\"}'\'' -e'"" [2025-09-06 11:38:13][350616254859415][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:38:13][350616254859415][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616254859415\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2393\"}'\'' -e'"" [2025-09-06 11:38:18][350616254859415][6100 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f0cee3b-0c3c-4b39-bc6c-db206f55aa16","id":"QR_9f0cee3b-0c3c-4b39-bc6c-db206f55aa16","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:38:19][350616254859415][6256 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 11:38:19][350616254859415][6256 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 11:38:19][350616254859415][6256 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:38:23][351477972381367][0 ms][INFO] === Request start === [2025-09-06 11:38:23][351477972381367][1 ms][DEBUG] START check_scloud [2025-09-06 11:38:23][351477972381367][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:38:23][351477972381367][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 18090 4974 24017920 172636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:38:23][351477972381367][302 ms][DEBUG] targetPkg: running [2025-09-06 11:38:23][351477972381367][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 11:38:23][351477972381367][302 ms][DEBUG] START check_boot_completed [2025-09-06 11:38:23][351477972381367][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:38:23][351477972381367][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:38:23][351477972381367][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:38:23][351477972381367][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:38:23][351477972381367][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 11:38:23][351477972381367][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:38:23][351477972381367][490 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1337\nsuccessfulTxPacketsPerSecond: 0.7768279525271807\nretriedTxPackets: 202\nretriedTxPacketsPerSecond: 0.22242509751846626\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1282\nsuccessfulRxPacketsPerSecond: 0.6539961822557888\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:38:23][351477972381367][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:38:24][351477972381367][927 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.291/316.291/316.291/0.000 ms\n [2025-09-06 11:38:24][351477972381367][927 ms][DEBUG] check_internet: online [2025-09-06 11:38:24][351477972381367][927 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:38:24][351477972381367][927 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972381367\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8574\"}'\'' -e'"" [2025-09-06 11:38:24][351477972381367][927 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:38:24][351477972381367][927 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972381367\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8574\"}'\'' -e'"" [2025-09-06 11:38:27][351477972381367][4504 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d3952d5a-243f-486b-8db6-25816f26bfb4","id":"QR_d3952d5a-243f-486b-8db6-25816f26bfb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:38:27][351477972381367][4660 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-06 11:38:27][351477972381367][4660 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-06 11:38:27][351477972381367][4661 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:42:03][352060487049122][1 ms][INFO] === Request start === [2025-09-06 11:42:03][352060487049122][1 ms][DEBUG] START check_scloud [2025-09-06 11:42:03][352060487049122][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:42:04][352060487049122][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 18090 4974 24111260 184608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:42:04][352060487049122][256 ms][DEBUG] targetPkg: running [2025-09-06 11:42:04][352060487049122][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-06 11:42:04][352060487049122][256 ms][DEBUG] START check_boot_completed [2025-09-06 11:42:04][352060487049122][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:42:04][352060487049122][287 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:42:04][352060487049122][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:42:04][352060487049122][334 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:42:04][352060487049122][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 11:42:04][352060487049122][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:42:04][352060487049122][445 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1463\nsuccessfulTxPacketsPerSecond: 0.41841559959619573\nretriedTxPackets: 233\nretriedTxPacketsPerSecond: 0.10294352053557197\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1393\nsuccessfulRxPacketsPerSecond: 0.3686042186918867\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:42:04][352060487049122][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:42:05][352060487049122][1849 ms][DEBUG] SU: done in 1405 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.242/291.242/291.242/0.000 ms\n [2025-09-06 11:42:05][352060487049122][1849 ms][DEBUG] check_internet: online [2025-09-06 11:42:05][352060487049122][1850 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:42:05][352060487049122][1850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487049122\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8540\"}'\'' -e'"" [2025-09-06 11:42:05][352060487049122][1850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:42:05][352060487049122][1850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487049122\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8540\"}'\'' -e'"" [2025-09-06 11:42:09][352060487049122][5583 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f76b137c-d72f-4cfc-bddd-2b6d921d57d1","id":"QR_f76b137c-d72f-4cfc-bddd-2b6d921d57d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:42:09][352060487049122][5739 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-09-06 11:42:09][352060487049122][5739 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-06 11:42:09][352060487049122][5739 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:42:11][352060487049122][0 ms][INFO] === Request start === [2025-09-06 11:42:11][352060487049122][1 ms][DEBUG] START check_scloud [2025-09-06 11:42:11][352060487049122][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:42:12][352060487049122][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 18090 4974 24303936 195128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:42:12][352060487049122][268 ms][DEBUG] targetPkg: running [2025-09-06 11:42:12][352060487049122][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-06 11:42:12][352060487049122][268 ms][DEBUG] START check_boot_completed [2025-09-06 11:42:12][352060487049122][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:42:12][352060487049122][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:42:12][352060487049122][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:42:12][352060487049122][377 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:42:12][352060487049122][377 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:42:12][352060487049122][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:42:12][352060487049122][502 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1507\nsuccessfulTxPacketsPerSecond: 0.33870644927870924\nretriedTxPackets: 241\nretriedTxPacketsPerSecond: 0.061582990777947134\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1434\nsuccessfulRxPacketsPerSecond: 0.3156128277369791\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:42:12][352060487049122][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:42:12][352060487049122][926 ms][DEBUG] SU: done in 423 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.656/298.656/298.656/0.000 ms\n [2025-09-06 11:42:12][352060487049122][926 ms][DEBUG] check_internet: online [2025-09-06 11:42:12][352060487049122][926 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:42:12][352060487049122][926 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487049122\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4058\"}'\'' -e'"" [2025-09-06 11:42:12][352060487049122][926 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:42:12][352060487049122][926 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487049122\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4058\"}'\'' -e'"" [2025-09-06 11:42:18][352060487049122][6266 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d5a9e32-c03e-47bb-a38e-65e1fd4b1d7d","id":"QR_2d5a9e32-c03e-47bb-a38e-65e1fd4b1d7d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:42:18][352060487049122][6423 ms][DEBUG] proc_open done in 5496 ms; code=255; res.len=3343 [2025-09-06 11:42:18][352060487049122][6423 ms][DEBUG] END runCmdUntilRes#1 in 5496 ms [2025-09-06 11:42:18][352060487049122][6423 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:43:03][357450470179637][0 ms][INFO] === Request start === [2025-09-06 11:43:03][357450470179637][1 ms][DEBUG] START check_scloud [2025-09-06 11:43:03][357450470179637][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:43:04][357450470179637][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 18090 4974 24446272 207292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:43:04][357450470179637][291 ms][DEBUG] targetPkg: running [2025-09-06 11:43:04][357450470179637][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-06 11:43:04][357450470179637][291 ms][DEBUG] START check_boot_completed [2025-09-06 11:43:04][357450470179637][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:43:04][357450470179637][337 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:43:04][357450470179637][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:43:04][357450470179637][416 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 11:43:04][357450470179637][416 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 11:43:04][357450470179637][416 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:43:04][357450470179637][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450470179637\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7301\"}'\'' -e'"" [2025-09-06 11:43:04][357450470179637][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:43:04][357450470179637][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450470179637\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7301\"}'\'' -e'"" [2025-09-06 11:43:07][357450470179637][3899 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_764c126b-d9e1-4859-b0c9-187adfe2f3d8","id":"QR_764c126b-d9e1-4859-b0c9-187adfe2f3d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:43:07][357450470179637][4055 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-06 11:43:07][357450470179637][4055 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-06 11:43:07][357450470179637][4056 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:43:10][357450470179637][0 ms][INFO] === Request start === [2025-09-06 11:43:10][357450470179637][1 ms][DEBUG] START check_scloud [2025-09-06 11:43:10][357450470179637][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:43:10][357450470179637][327 ms][DEBUG] SU: done in 327 ms; outu0_a118 18090 4974 24582604 207984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:43:10][357450470179637][327 ms][DEBUG] targetPkg: running [2025-09-06 11:43:10][357450470179637][328 ms][DEBUG] END check_scloud in 327 ms [2025-09-06 11:43:10][357450470179637][328 ms][DEBUG] START check_boot_completed [2025-09-06 11:43:10][357450470179637][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:43:10][357450470179637][374 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:43:10][357450470179637][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:43:10][357450470179637][436 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:43:10][357450470179637][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:43:10][357450470179637][437 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:43:10][357450470179637][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450470179637\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1187\"}'\'' -e'"" [2025-09-06 11:43:10][357450470179637][437 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:43:10][357450470179637][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450470179637\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1187\"}'\'' -e'"" [2025-09-06 11:43:15][357450470179637][5107 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b5ad5f0-7da9-4e1f-9693-9434bcaa90f4","id":"QR_2b5ad5f0-7da9-4e1f-9693-9434bcaa90f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:43:15][357450470179637][5263 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-06 11:43:15][357450470179637][5264 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-06 11:43:15][357450470179637][5264 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:44:04][357211240394066][1 ms][INFO] === Request start === [2025-09-06 11:44:04][357211240394066][1 ms][DEBUG] START check_scloud [2025-09-06 11:44:04][357211240394066][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:44:04][357211240394066][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 18090 4974 24673932 217672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:44:04][357211240394066][292 ms][DEBUG] targetPkg: running [2025-09-06 11:44:04][357211240394066][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 11:44:04][357211240394066][292 ms][DEBUG] START check_boot_completed [2025-09-06 11:44:04][357211240394066][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:44:04][357211240394066][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:44:04][357211240394066][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:44:04][357211240394066][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:44:04][357211240394066][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 11:44:04][357211240394066][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:44:04][357211240394066][495 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1507\nsuccessfulTxPacketsPerSecond: 0.33870644927870924\nretriedTxPackets: 241\nretriedTxPacketsPerSecond: 0.061582990777947134\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1434\nsuccessfulRxPacketsPerSecond: 0.3156128277369791\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:44:04][357211240394066][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:44:04][357211240394066][886 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.252/275.252/275.252/0.000 ms\n [2025-09-06 11:44:04][357211240394066][886 ms][DEBUG] check_internet: online [2025-09-06 11:44:04][357211240394066][886 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:44:04][357211240394066][886 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211240394066\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2297\"}'\'' -e'"" [2025-09-06 11:44:04][357211240394066][886 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:44:04][357211240394066][886 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211240394066\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2297\"}'\'' -e'"" [2025-09-06 11:44:09][357211240394066][5556 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe2d49d4-64bb-4524-8c94-56b2ed29777c","id":"QR_fe2d49d4-64bb-4524-8c94-56b2ed29777c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:44:09][357211240394066][5712 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=3343 [2025-09-06 11:44:09][357211240394066][5712 ms][DEBUG] END runCmdUntilRes#1 in 4826 ms [2025-09-06 11:44:09][357211240394066][5713 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:44:12][357211240394066][0 ms][INFO] === Request start === [2025-09-06 11:44:12][357211240394066][1 ms][DEBUG] START check_scloud [2025-09-06 11:44:12][357211240394066][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:44:12][357211240394066][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 18090 4974 24840980 214816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:44:12][357211240394066][286 ms][DEBUG] targetPkg: running [2025-09-06 11:44:12][357211240394066][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 11:44:12][357211240394066][286 ms][DEBUG] START check_boot_completed [2025-09-06 11:44:12][357211240394066][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:44:12][357211240394066][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:44:12][357211240394066][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:44:12][357211240394066][395 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:44:12][357211240394066][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:44:12][357211240394066][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:44:12][357211240394066][520 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1507\nsuccessfulTxPacketsPerSecond: 0.33870644927870924\nretriedTxPackets: 241\nretriedTxPacketsPerSecond: 0.061582990777947134\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1434\nsuccessfulRxPacketsPerSecond: 0.3156128277369791\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:44:12][357211240394066][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:44:13][357211240394066][895 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.411/249.411/249.411/0.000 ms\n [2025-09-06 11:44:13][357211240394066][895 ms][DEBUG] check_internet: online [2025-09-06 11:44:13][357211240394066][895 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:44:13][357211240394066][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211240394066\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7143\"}'\'' -e'"" [2025-09-06 11:44:13][357211240394066][895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:44:13][357211240394066][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211240394066\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7143\"}'\'' -e'"" [2025-09-06 11:44:17][357211240394066][4956 ms][DEBUG] proc_open done in 4061 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 11:44:17][357211240394066][4956 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-06 11:44:17][357211240394066][4956 ms][WARN] Detected error: Process with pid 18090 either refused to load frida-agent, or terminated during injectionProcess with pid 18090 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 11:44:17][357211240394066][4956 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 11:44:17][357211240394066][5222 ms][DEBUG] SU: done in 266 ms; outsystem 5392 4974 12620984 247432 ep_poll 0 S system_server\n [2025-09-06 11:44:17][357211240394066][5222 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 11:44:17][357211240394066][5362 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 11:44:17][357211240394066][5362 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 11:44:17][357211240394066][5362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 11:44:17][357211240394066][5503 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 11:44:17][357211240394066][5503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 11:44:17][357211240394066][5675 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 11:44:19][357211240394066][7690 ms][DEBUG] START check_boot_completed [2025-09-06 11:44:19][357211240394066][7690 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:44:19][357211240394066][7737 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:44:19][357211240394066][7737 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:44:19][357211240394066][7784 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:44:19][357211240394066][7784 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 11:44:22][357211240394066][10798 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 11:44:22][357211240394066][10798 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211240394066\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7143\"}'\'' -e'"" [2025-09-06 11:44:28][357211240394066][16266 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d3f86cc-2fe1-43b8-a9ac-427461554cd1","id":"QR_7d3f86cc-2fe1-43b8-a9ac-427461554cd1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:44:28][357211240394066][16422 ms][DEBUG] proc_open done in 5624 ms; code=255; res.len=3343 [2025-09-06 11:44:28][357211240394066][16422 ms][DEBUG] END runCmdUntilRes#2 in 5624 ms [2025-09-06 11:44:28][357211240394066][16422 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:45:03][356729400264085][1 ms][INFO] === Request start === [2025-09-06 11:45:03][356729400264085][1 ms][DEBUG] START check_scloud [2025-09-06 11:45:03][356729400264085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:45:04][356729400264085][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 20157 4974 23399320 127892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:45:04][356729400264085][301 ms][DEBUG] targetPkg: running [2025-09-06 11:45:04][356729400264085][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-06 11:45:04][356729400264085][301 ms][DEBUG] START check_boot_completed [2025-09-06 11:45:04][356729400264085][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:45:04][356729400264085][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:45:04][356729400264085][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:45:04][356729400264085][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:45:04][356729400264085][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:45:04][356729400264085][395 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:45:04][356729400264085][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729400264085\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3381\"}'\'' -e'"" [2025-09-06 11:45:04][356729400264085][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:45:04][356729400264085][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729400264085\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3381\"}'\'' -e'"" [2025-09-06 11:45:07][356729400264085][3753 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15333bff-1d7a-4702-9073-b427885cf960","id":"QR_15333bff-1d7a-4702-9073-b427885cf960","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:45:07][356729400264085][3909 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-06 11:45:07][356729400264085][3909 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-06 11:45:07][356729400264085][3909 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:45:14][354071310750792][0 ms][INFO] === Request start === [2025-09-06 11:45:14][354071310750792][1 ms][DEBUG] START check_scloud [2025-09-06 11:45:14][354071310750792][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:45:14][354071310750792][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 20157 4974 23564320 138572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:45:14][354071310750792][298 ms][DEBUG] targetPkg: running [2025-09-06 11:45:14][354071310750792][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 11:45:14][354071310750792][298 ms][DEBUG] START check_boot_completed [2025-09-06 11:45:14][354071310750792][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:45:14][354071310750792][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:45:14][354071310750792][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:45:14][354071310750792][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:45:14][354071310750792][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:45:14][354071310750792][391 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:45:14][354071310750792][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354071310750792\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1733\"}'\'' -e'"" [2025-09-06 11:45:14][354071310750792][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:45:14][354071310750792][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354071310750792\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1733\"}'\'' -e'"" [2025-09-06 11:45:19][354071310750792][5093 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25447405-cf4c-409c-bbbf-0e890fb42da4","id":"QR_25447405-cf4c-409c-bbbf-0e890fb42da4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:45:19][354071310750792][5249 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-06 11:45:19][354071310750792][5249 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-06 11:45:19][354071310750792][5249 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:45:21][354838355338141][0 ms][INFO] === Request start === [2025-09-06 11:45:21][354838355338141][1 ms][DEBUG] START check_scloud [2025-09-06 11:45:21][354838355338141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:45:22][354838355338141][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 20157 4974 23710824 149504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:45:22][354838355338141][314 ms][DEBUG] targetPkg: running [2025-09-06 11:45:22][354838355338141][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 11:45:22][354838355338141][314 ms][DEBUG] START check_boot_completed [2025-09-06 11:45:22][354838355338141][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:45:22][354838355338141][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:45:22][354838355338141][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:45:22][354838355338141][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:45:22][354838355338141][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:45:22][354838355338141][424 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:45:22][354838355338141][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838355338141\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5349\"}'\'' -e'"" [2025-09-06 11:45:22][354838355338141][424 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:45:22][354838355338141][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838355338141\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5349\"}'\'' -e'"" [2025-09-06 11:45:25][354838355338141][4001 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99b14bea-79f1-4c4d-9ee0-7ce38ab39543","id":"QR_99b14bea-79f1-4c4d-9ee0-7ce38ab39543","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:45:26][354838355338141][4157 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-06 11:45:26][354838355338141][4157 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-06 11:45:26][354838355338141][4157 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:45:28][350854800181931][0 ms][INFO] === Request start === [2025-09-06 11:45:28][350854800181931][1 ms][DEBUG] START check_scloud [2025-09-06 11:45:28][350854800181931][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:45:28][350854800181931][259 ms][DEBUG] SU: done in 259 ms; outu0_a118 20157 4974 23834892 160680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:45:28][350854800181931][259 ms][DEBUG] targetPkg: running [2025-09-06 11:45:28][350854800181931][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-06 11:45:28][350854800181931][260 ms][DEBUG] START check_boot_completed [2025-09-06 11:45:28][350854800181931][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:45:28][350854800181931][306 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:45:28][350854800181931][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:45:28][350854800181931][384 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 11:45:28][350854800181931][384 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 11:45:28][350854800181931][384 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:45:28][350854800181931][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350854800181931\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6167\"}'\'' -e'"" [2025-09-06 11:45:28][350854800181931][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:45:28][350854800181931][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350854800181931\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6167\"}'\'' -e'"" [2025-09-06 11:45:31][350854800181931][3852 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7cc17aba-f728-426b-906f-8b5f865d6434","id":"QR_7cc17aba-f728-426b-906f-8b5f865d6434","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:45:32][350854800181931][4008 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-06 11:45:32][350854800181931][4009 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-06 11:45:32][350854800181931][4009 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:47:03][353310804909956][0 ms][INFO] === Request start === [2025-09-06 11:47:03][353310804909956][1 ms][DEBUG] START check_scloud [2025-09-06 11:47:03][353310804909956][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:47:04][353310804909956][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 20157 4974 23919836 173140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:47:04][353310804909956][307 ms][DEBUG] targetPkg: running [2025-09-06 11:47:04][353310804909956][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 11:47:04][353310804909956][307 ms][DEBUG] START check_boot_completed [2025-09-06 11:47:04][353310804909956][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:47:04][353310804909956][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:47:04][353310804909956][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:47:04][353310804909956][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:47:04][353310804909956][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:47:04][353310804909956][400 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:47:04][353310804909956][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804909956\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6707\"}'\'' -e'"" [2025-09-06 11:47:04][353310804909956][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:47:04][353310804909956][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804909956\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6707\"}'\'' -e'"" [2025-09-06 11:47:08][353310804909956][4977 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2fae6e7c-8194-4286-8a46-c033425279b5","id":"QR_2fae6e7c-8194-4286-8a46-c033425279b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:47:08][353310804909956][5133 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-06 11:47:08][353310804909956][5133 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-06 11:47:08][353310804909956][5134 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:47:11][353310804909956][1 ms][INFO] === Request start === [2025-09-06 11:47:11][353310804909956][1 ms][DEBUG] START check_scloud [2025-09-06 11:47:11][353310804909956][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:47:11][353310804909956][284 ms][DEBUG] SU: done in 282 ms; outu0_a118 20157 4974 24088548 183996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:47:11][353310804909956][284 ms][DEBUG] targetPkg: running [2025-09-06 11:47:11][353310804909956][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-06 11:47:11][353310804909956][284 ms][DEBUG] START check_boot_completed [2025-09-06 11:47:11][353310804909956][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:47:11][353310804909956][330 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:47:11][353310804909956][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:47:11][353310804909956][393 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:47:11][353310804909956][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:47:11][353310804909956][393 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:47:11][353310804909956][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804909956\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1811\"}'\'' -e'"" [2025-09-06 11:47:11][353310804909956][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:47:11][353310804909956][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804909956\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1811\"}'\'' -e'"" [2025-09-06 11:47:16][353310804909956][5579 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_537809ef-b8fd-4a2e-9a47-8975c9ccc072","id":"QR_537809ef-b8fd-4a2e-9a47-8975c9ccc072","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:47:17][353310804909956][5735 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-06 11:47:17][353310804909956][5735 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-06 11:47:17][353310804909956][5736 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:50:03][357674433084325][1 ms][INFO] === Request start === [2025-09-06 11:50:03][357674433084325][1 ms][DEBUG] START check_scloud [2025-09-06 11:50:03][357674433084325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:50:04][357674433084325][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 20157 4974 24223936 196224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:50:04][357674433084325][307 ms][DEBUG] targetPkg: running [2025-09-06 11:50:04][357674433084325][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 11:50:04][357674433084325][307 ms][DEBUG] START check_boot_completed [2025-09-06 11:50:04][357674433084325][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:50:04][357674433084325][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:50:04][357674433084325][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:50:04][357674433084325][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:50:04][357674433084325][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:50:04][357674433084325][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:50:04][357674433084325][510 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1926\nsuccessfulTxPacketsPerSecond: 1.388681746623581\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.31154196702295134\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1786\nsuccessfulRxPacketsPerSecond: 1.166625238213605\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:50:04][357674433084325][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:50:05][357674433084325][1869 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.343/306.343/306.343/0.000 ms\n [2025-09-06 11:50:05][357674433084325][1870 ms][DEBUG] check_internet: online [2025-09-06 11:50:05][357674433084325][1870 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:50:05][357674433084325][1870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674433084325\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7195\"}'\'' -e'"" [2025-09-06 11:50:05][357674433084325][1870 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:50:05][357674433084325][1870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674433084325\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7195\"}'\'' -e'"" [2025-09-06 11:50:09][357674433084325][5790 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b31f1053-8836-4a7d-943f-5dcde25db89f","id":"QR_b31f1053-8836-4a7d-943f-5dcde25db89f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:50:09][357674433084325][5946 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-09-06 11:50:09][357674433084325][5946 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-06 11:50:09][357674433084325][5947 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:50:11][357674433084325][0 ms][INFO] === Request start === [2025-09-06 11:50:11][357674433084325][1 ms][DEBUG] START check_scloud [2025-09-06 11:50:11][357674433084325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:50:12][357674433084325][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 20157 4974 24374728 207188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:50:12][357674433084325][295 ms][DEBUG] targetPkg: running [2025-09-06 11:50:12][357674433084325][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 11:50:12][357674433084325][295 ms][DEBUG] START check_boot_completed [2025-09-06 11:50:12][357674433084325][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:50:12][357674433084325][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:50:12][357674433084325][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:50:12][357674433084325][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:50:12][357674433084325][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:50:12][357674433084325][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:50:12][357674433084325][497 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1926\nsuccessfulTxPacketsPerSecond: 1.388681746623581\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.31154196702295134\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1786\nsuccessfulRxPacketsPerSecond: 1.166625238213605\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:50:12][357674433084325][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:50:12][357674433084325][857 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.860/265.860/265.860/0.000 ms\n [2025-09-06 11:50:12][357674433084325][857 ms][DEBUG] check_internet: online [2025-09-06 11:50:12][357674433084325][857 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:50:12][357674433084325][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674433084325\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9288\"}'\'' -e'"" [2025-09-06 11:50:12][357674433084325][857 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:50:12][357674433084325][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674433084325\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9288\"}'\'' -e'"" [2025-09-06 11:50:17][357674433084325][6012 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0ba579f-ef99-47a5-8694-8ecf2a8b8bd6","id":"QR_c0ba579f-ef99-47a5-8694-8ecf2a8b8bd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:50:18][357674433084325][6168 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 11:50:18][357674433084325][6168 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 11:50:18][357674433084325][6168 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:50:23][358230100520536][0 ms][INFO] === Request start === [2025-09-06 11:50:23][358230100520536][0 ms][DEBUG] START check_scloud [2025-09-06 11:50:23][358230100520536][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:50:23][358230100520536][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 20157 4974 24525520 216628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:50:23][358230100520536][287 ms][DEBUG] targetPkg: running [2025-09-06 11:50:23][358230100520536][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-06 11:50:23][358230100520536][287 ms][DEBUG] START check_boot_completed [2025-09-06 11:50:23][358230100520536][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:50:23][358230100520536][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:50:23][358230100520536][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:50:23][358230100520536][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:50:23][358230100520536][366 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 11:50:23][358230100520536][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:50:24][358230100520536][491 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1926\nsuccessfulTxPacketsPerSecond: 1.388681746623581\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.31154196702295134\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1786\nsuccessfulRxPacketsPerSecond: 1.166625238213605\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:50:24][358230100520536][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:50:24][358230100520536][881 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=283 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 283.428/283.428/283.428/0.000 ms\n [2025-09-06 11:50:24][358230100520536][881 ms][DEBUG] check_internet: online [2025-09-06 11:50:24][358230100520536][881 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:50:24][358230100520536][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358230100520536\",\"model\":\"SM-N970U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2292\"}'\'' -e'"" [2025-09-06 11:50:24][358230100520536][882 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:50:24][358230100520536][882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358230100520536\",\"model\":\"SM-N970U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2292\"}'\'' -e'"" [2025-09-06 11:50:29][358230100520536][5630 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed812bef-b593-4473-8996-4858d444d226","id":"QR_ed812bef-b593-4473-8996-4858d444d226","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:50:29][358230100520536][5786 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 11:50:29][358230100520536][5786 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-09-06 11:50:29][358230100520536][5786 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:50:32][358230100520536][0 ms][INFO] === Request start === [2025-09-06 11:50:32][358230100520536][1 ms][DEBUG] START check_scloud [2025-09-06 11:50:32][358230100520536][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:50:33][358230100520536][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 20157 4974 24665908 227992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:50:33][358230100520536][306 ms][DEBUG] targetPkg: running [2025-09-06 11:50:33][358230100520536][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 11:50:33][358230100520536][306 ms][DEBUG] START check_boot_completed [2025-09-06 11:50:33][358230100520536][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:50:33][358230100520536][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:50:33][358230100520536][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:50:33][358230100520536][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:50:33][358230100520536][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:50:33][358230100520536][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:50:33][358230100520536][495 ms][DEBUG] SU: done in 96 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1926\nsuccessfulTxPacketsPerSecond: 1.388681746623581\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.31154196702295134\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1786\nsuccessfulRxPacketsPerSecond: 1.166625238213605\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:50:33][358230100520536][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:50:33][358230100520536][854 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.169/267.169/267.169/0.000 ms\n [2025-09-06 11:50:33][358230100520536][854 ms][DEBUG] check_internet: online [2025-09-06 11:50:33][358230100520536][854 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:50:33][358230100520536][854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358230100520536\",\"model\":\"SM-N970U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9115\"}'\'' -e'"" [2025-09-06 11:50:33][358230100520536][854 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:50:33][358230100520536][854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358230100520536\",\"model\":\"SM-N970U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9115\"}'\'' -e'"" [2025-09-06 11:50:37][358230100520536][4429 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7fe97739-7c0e-4513-ace7-679a8cfce4e5","id":"QR_7fe97739-7c0e-4513-ace7-679a8cfce4e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:50:37][358230100520536][4585 ms][DEBUG] proc_open done in 3731 ms; code=255; res.len=3343 [2025-09-06 11:50:37][358230100520536][4585 ms][DEBUG] END runCmdUntilRes#1 in 3731 ms [2025-09-06 11:50:37][358230100520536][4585 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:53:03][350637544810802][1 ms][INFO] === Request start === [2025-09-06 11:53:03][350637544810802][1 ms][DEBUG] START check_scloud [2025-09-06 11:53:03][350637544810802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:53:03][350637544810802][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 20157 4974 24769364 240132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:53:03][350637544810802][302 ms][DEBUG] targetPkg: running [2025-09-06 11:53:03][350637544810802][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 11:53:03][350637544810802][302 ms][DEBUG] START check_boot_completed [2025-09-06 11:53:03][350637544810802][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:53:03][350637544810802][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:53:03][350637544810802][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:53:03][350637544810802][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:53:03][350637544810802][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 11:53:03][350637544810802][381 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:53:03][350637544810802][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544810802\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1886\"}'\'' -e'"" [2025-09-06 11:53:03][350637544810802][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:53:03][350637544810802][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544810802\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1886\"}'\'' -e'"" [2025-09-06 11:53:11][350637544810802][8129 ms][DEBUG] proc_open done in 7747 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 11:53:11][350637544810802][8129 ms][DEBUG] END runCmdUntilRes#1 in 7748 ms [2025-09-06 11:53:11][350637544810802][8129 ms][WARN] Detected error: Process with pid 20157 either refused to load frida-agent, or terminated during injectionProcess with pid 20157 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 11:53:11][350637544810802][8129 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 11:53:11][350637544810802][8457 ms][DEBUG] SU: done in 328 ms; out [2025-09-06 11:53:11][350637544810802][8457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 11:53:12][350637544810802][8754 ms][DEBUG] SU: done in 297 ms; out [2025-09-06 11:53:12][350637544810802][8754 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 11:53:12][350637544810802][8754 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 11:53:12][350637544810802][8972 ms][DEBUG] SU: done in 219 ms; out [2025-09-06 11:53:12][350637544810802][8972 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 11:53:12][350637544810802][9332 ms][DEBUG] SU: done in 359 ms; out [2025-09-06 11:53:14][350637544810802][11347 ms][DEBUG] START check_boot_completed [2025-09-06 11:53:14][350637544810802][11347 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:53:14][350637544810802][11394 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:53:14][350637544810802][11394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:53:14][350637544810802][11456 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:53:14][350637544810802][11456 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 11:53:17][350637544810802][14471 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 11:53:17][350637544810802][14471 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544810802\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1886\"}'\'' -e'"" [2025-09-06 11:53:19][350637544810802][15971 ms][DEBUG] proc_open done in 1500 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-06 11:53:19][350637544810802][15971 ms][DEBUG] END runCmdUntilRes#2 in 1500 ms [2025-09-06 11:53:19][350637544810802][15971 ms][WARN] Detected error 2; Reboot the device [2025-09-06 11:53:19][350637544810802][15971 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 11:53:19][350637544810802][16221 ms][DEBUG] SU: done in 250 ms; outsystem 21869 21528 7634388 139116 0 0 R system_server\n [2025-09-06 11:53:19][350637544810802][16221 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-06 11:53:20][350637544810802][16970 ms][DEBUG] SU: done in 749 ms; out [2025-09-06 11:54:03][350637544810802][0 ms][INFO] === Request start === [2025-09-06 11:54:03][350637544810802][1 ms][DEBUG] START check_scloud [2025-09-06 11:54:03][350637544810802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:54:03][350637544810802][43 ms][DEBUG] SU: done in 42 ms; out [2025-09-06 11:54:03][350637544810802][43 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 11:54:03][350637544810802][74 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 11:54:03][350637544810802][74 ms][WARN] check_devices: no device [2025-09-06 11:54:03][350637544810802][74 ms][WARN] check_devices: no device [2025-09-06 11:54:03][350637544810802][74 ms][DEBUG] END check_scloud in 73 ms [2025-09-06 11:54:07][355142630336114][0 ms][INFO] === Request start === [2025-09-06 11:54:07][355142630336114][1 ms][DEBUG] START check_scloud [2025-09-06 11:54:07][355142630336114][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:54:07][355142630336114][40 ms][DEBUG] SU: done in 39 ms; out [2025-09-06 11:54:07][355142630336114][40 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 11:54:07][355142630336114][71 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 11:54:07][355142630336114][71 ms][WARN] check_devices: no device [2025-09-06 11:54:07][355142630336114][71 ms][WARN] check_devices: no device [2025-09-06 11:54:07][355142630336114][71 ms][DEBUG] END check_scloud in 71 ms [2025-09-06 11:55:04][350637544810802][1 ms][INFO] === Request start === [2025-09-06 11:55:04][350637544810802][1 ms][DEBUG] START check_scloud [2025-09-06 11:55:04][350637544810802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:55:04][350637544810802][382 ms][DEBUG] SU: done in 381 ms; out [2025-09-06 11:55:04][350637544810802][382 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 11:55:04][350637544810802][429 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 11:55:04][350637544810802][429 ms][DEBUG] check_devices: device found [2025-09-06 11:55:04][350637544810802][429 ms][WARN] targetPkg: not running, restarting [2025-09-06 11:55:04][350637544810802][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 11:55:04][350637544810802][569 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 11:55:04][350637544810802][570 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 11:55:04][350637544810802][850 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 11:55:06][350637544810802][2865 ms][DEBUG] END check_scloud in 2864 ms [2025-09-06 11:55:06][350637544810802][2866 ms][DEBUG] START check_boot_completed [2025-09-06 11:55:06][350637544810802][2866 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:55:06][350637544810802][2912 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:55:06][350637544810802][2912 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:55:07][350637544810802][2975 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 11:55:07][350637544810802][2975 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 11:55:07][350637544810802][2975 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:55:07][350637544810802][2975 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544810802\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1269\"}'\'' -e'"" [2025-09-06 11:55:07][350637544810802][2976 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:55:07][350637544810802][2976 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544810802\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1269\"}'\'' -e'"" [2025-09-06 11:55:14][350637544810802][10676 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e84718bf-254d-44e4-b95f-b3f578db89d5","id":"QR_e84718bf-254d-44e4-b95f-b3f578db89d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:55:14][350637544810802][10832 ms][DEBUG] proc_open done in 7856 ms; code=255; res.len=3343 [2025-09-06 11:55:14][350637544810802][10832 ms][DEBUG] END runCmdUntilRes#1 in 7857 ms [2025-09-06 11:55:14][350637544810802][10832 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:55:17][350637544810802][1 ms][INFO] === Request start === [2025-09-06 11:55:17][350637544810802][1 ms][DEBUG] START check_scloud [2025-09-06 11:55:17][350637544810802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:55:17][350637544810802][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 11530 4970 23742308 106372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:55:17][350637544810802][302 ms][DEBUG] targetPkg: running [2025-09-06 11:55:17][350637544810802][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 11:55:17][350637544810802][302 ms][DEBUG] START check_boot_completed [2025-09-06 11:55:17][350637544810802][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:55:17][350637544810802][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:55:17][350637544810802][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:55:17][350637544810802][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:55:17][350637544810802][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:55:17][350637544810802][395 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:55:17][350637544810802][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544810802\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9655\"}'\'' -e'"" [2025-09-06 11:55:17][350637544810802][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:55:17][350637544810802][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544810802\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9655\"}'\'' -e'"" [2025-09-06 11:55:23][350637544810802][6191 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ab5a2c7-72f9-44f6-a86c-48c87179b6a0","id":"QR_5ab5a2c7-72f9-44f6-a86c-48c87179b6a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:55:23][350637544810802][6347 ms][DEBUG] proc_open done in 5952 ms; code=255; res.len=3343 [2025-09-06 11:55:23][350637544810802][6347 ms][DEBUG] END runCmdUntilRes#1 in 5952 ms [2025-09-06 11:55:23][350637544810802][6347 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:55:27][355142630336114][0 ms][INFO] === Request start === [2025-09-06 11:55:27][355142630336114][1 ms][DEBUG] START check_scloud [2025-09-06 11:55:27][355142630336114][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:55:28][355142630336114][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 11530 4970 23895928 111136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:55:28][355142630336114][325 ms][DEBUG] targetPkg: running [2025-09-06 11:55:28][355142630336114][325 ms][DEBUG] END check_scloud in 325 ms [2025-09-06 11:55:28][355142630336114][325 ms][DEBUG] START check_boot_completed [2025-09-06 11:55:28][355142630336114][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:55:28][355142630336114][372 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 11:55:28][355142630336114][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:55:28][355142630336114][419 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:55:28][355142630336114][419 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 11:55:28][355142630336114][419 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:55:28][355142630336114][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355142630336114\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1829\"}'\'' -e'"" [2025-09-06 11:55:28][355142630336114][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:55:28][355142630336114][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355142630336114\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1829\"}'\'' -e'"" [2025-09-06 11:55:32][355142630336114][4246 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c76c3e3-4a51-49ed-a671-c5983c698cb3","id":"QR_2c76c3e3-4a51-49ed-a671-c5983c698cb3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:55:32][355142630336114][4402 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-06 11:55:32][355142630336114][4402 ms][DEBUG] END runCmdUntilRes#1 in 3984 ms [2025-09-06 11:55:32][355142630336114][4402 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:55:34][355142630336114][0 ms][INFO] === Request start === [2025-09-06 11:55:34][355142630336114][1 ms][DEBUG] START check_scloud [2025-09-06 11:55:34][355142630336114][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:55:35][355142630336114][408 ms][DEBUG] SU: done in 408 ms; outu0_a118 11530 4970 24058780 100820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:55:35][355142630336114][409 ms][DEBUG] targetPkg: running [2025-09-06 11:55:35][355142630336114][409 ms][DEBUG] END check_scloud in 408 ms [2025-09-06 11:55:35][355142630336114][409 ms][DEBUG] START check_boot_completed [2025-09-06 11:55:35][355142630336114][409 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:55:35][355142630336114][455 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:55:35][355142630336114][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:55:35][355142630336114][518 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:55:35][355142630336114][518 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:55:35][355142630336114][518 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:55:35][355142630336114][518 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355142630336114\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5630\"}'\'' -e'"" [2025-09-06 11:55:35][355142630336114][518 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:55:35][355142630336114][518 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355142630336114\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5630\"}'\'' -e'"" [2025-09-06 11:55:40][355142630336114][6126 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80109693-46e9-482d-9d16-a8a6703c1c26","id":"QR_80109693-46e9-482d-9d16-a8a6703c1c26","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:55:40][355142630336114][6282 ms][DEBUG] proc_open done in 5764 ms; code=255; res.len=3343 [2025-09-06 11:55:40][355142630336114][6282 ms][DEBUG] END runCmdUntilRes#1 in 5764 ms [2025-09-06 11:55:40][355142630336114][6282 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:58:04][353074281828887][1 ms][INFO] === Request start === [2025-09-06 11:58:04][353074281828887][1 ms][DEBUG] START check_scloud [2025-09-06 11:58:04][353074281828887][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:58:04][353074281828887][344 ms][DEBUG] SU: done in 342 ms; outu0_a118 11530 4970 24052220 97088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:58:04][353074281828887][344 ms][DEBUG] targetPkg: running [2025-09-06 11:58:04][353074281828887][344 ms][DEBUG] END check_scloud in 343 ms [2025-09-06 11:58:04][353074281828887][344 ms][DEBUG] START check_boot_completed [2025-09-06 11:58:04][353074281828887][344 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:58:04][353074281828887][375 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 11:58:04][353074281828887][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:58:04][353074281828887][422 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 11:58:04][353074281828887][422 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 11:58:04][353074281828887][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:58:04][353074281828887][578 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 761\nsuccessfulTxPacketsPerSecond: 6.495042010319879\nretriedTxPackets: 115\nretriedTxPacketsPerSecond: 1.692182403328972\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 821\nsuccessfulRxPacketsPerSecond: 5.661167610060392\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:58:04][353074281828887][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:58:06][353074281828887][2593 ms][DEBUG] SU: done in 2015 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=408 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 408.972/408.972/408.972/0.000 ms\n [2025-09-06 11:58:06][353074281828887][2593 ms][DEBUG] check_internet: online [2025-09-06 11:58:06][353074281828887][2593 ms][DEBUG] rawBody.length=1150 [2025-09-06 11:58:06][353074281828887][2594 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074281828887\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1712\"}'\'' -e'"" [2025-09-06 11:58:06][353074281828887][2594 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:58:06][353074281828887][2594 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074281828887\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1712\"}'\'' -e'"" [2025-09-06 11:58:10][353074281828887][6358 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55d0b8a9-6a19-44d7-8412-9d7b8bac10de","id":"QR_55d0b8a9-6a19-44d7-8412-9d7b8bac10de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:58:10][353074281828887][6514 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-06 11:58:10][353074281828887][6514 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-06 11:58:10][353074281828887][6514 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 11:58:13][353074281828887][0 ms][INFO] === Request start === [2025-09-06 11:58:13][353074281828887][1 ms][DEBUG] START check_scloud [2025-09-06 11:58:13][353074281828887][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 11:58:13][353074281828887][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 11530 4970 24188548 109124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 11:58:13][353074281828887][301 ms][DEBUG] targetPkg: running [2025-09-06 11:58:13][353074281828887][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 11:58:13][353074281828887][301 ms][DEBUG] START check_boot_completed [2025-09-06 11:58:13][353074281828887][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 11:58:13][353074281828887][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 11:58:13][353074281828887][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 11:58:13][353074281828887][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 11:58:13][353074281828887][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 11:58:13][353074281828887][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 11:58:13][353074281828887][551 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 761\nsuccessfulTxPacketsPerSecond: 6.495042010319879\nretriedTxPackets: 115\nretriedTxPacketsPerSecond: 1.692182403328972\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 821\nsuccessfulRxPacketsPerSecond: 5.661167610060392\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 11:58:13][353074281828887][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 11:58:14][353074281828887][957 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=271 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 271.213/271.213/271.213/0.000 ms\n [2025-09-06 11:58:14][353074281828887][957 ms][DEBUG] check_internet: online [2025-09-06 11:58:14][353074281828887][957 ms][DEBUG] rawBody.length=1160 [2025-09-06 11:58:14][353074281828887][957 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074281828887\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8204\"}'\'' -e'"" [2025-09-06 11:58:14][353074281828887][958 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 11:58:14][353074281828887][958 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074281828887\",\"model\":\"SM-S908B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8204\"}'\'' -e'"" [2025-09-06 11:58:19][353074281828887][6018 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d665c6ab-2604-466a-8bb2-b510e8559a73","id":"QR_d665c6ab-2604-466a-8bb2-b510e8559a73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 11:58:19][353074281828887][6175 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 11:58:19][353074281828887][6175 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 11:58:19][353074281828887][6175 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:01:03][354529384263133][1 ms][INFO] === Request start === [2025-09-06 12:01:03][354529384263133][1 ms][DEBUG] START check_scloud [2025-09-06 12:01:03][354529384263133][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:01:03][354529384263133][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 11530 4970 24306436 111964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:01:03][354529384263133][266 ms][DEBUG] targetPkg: running [2025-09-06 12:01:03][354529384263133][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-06 12:01:03][354529384263133][266 ms][DEBUG] START check_boot_completed [2025-09-06 12:01:03][354529384263133][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:01:03][354529384263133][297 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:01:03][354529384263133][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:01:03][354529384263133][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:01:03][354529384263133][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 12:01:03][354529384263133][344 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:01:03][354529384263133][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529384263133\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1565\"}'\'' -e'"" [2025-09-06 12:01:03][354529384263133][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:01:03][354529384263133][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529384263133\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1565\"}'\'' -e'"" [2025-09-06 12:01:08][354529384263133][4937 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59c96ad1-d5a8-4301-b6f8-8881288e1fc6","id":"QR_59c96ad1-d5a8-4301-b6f8-8881288e1fc6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:01:08][354529384263133][5093 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-06 12:01:08][354529384263133][5093 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-09-06 12:01:08][354529384263133][5093 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:01:11][354529384263133][0 ms][INFO] === Request start === [2025-09-06 12:01:11][354529384263133][1 ms][DEBUG] START check_scloud [2025-09-06 12:01:11][354529384263133][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:01:11][354529384263133][275 ms][DEBUG] SU: done in 275 ms; outu0_a118 11530 4970 24446860 117624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:01:11][354529384263133][276 ms][DEBUG] targetPkg: running [2025-09-06 12:01:11][354529384263133][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-06 12:01:11][354529384263133][276 ms][DEBUG] START check_boot_completed [2025-09-06 12:01:11][354529384263133][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:01:11][354529384263133][321 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 12:01:11][354529384263133][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:01:11][354529384263133][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:01:11][354529384263133][368 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:01:11][354529384263133][368 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:01:11][354529384263133][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529384263133\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8181\"}'\'' -e'"" [2025-09-06 12:01:11][354529384263133][368 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:01:11][354529384263133][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529384263133\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8181\"}'\'' -e'"" [2025-09-06 12:01:16][354529384263133][5523 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c6935cb-95d5-4cce-b694-56d302529510","id":"QR_8c6935cb-95d5-4cce-b694-56d302529510","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:01:16][354529384263133][5679 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 12:01:16][354529384263133][5679 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 12:01:16][354529384263133][5679 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:01:20][352677531311545][0 ms][INFO] === Request start === [2025-09-06 12:01:20][352677531311545][1 ms][DEBUG] START check_scloud [2025-09-06 12:01:20][352677531311545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:01:21][352677531311545][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 11530 4970 24628244 129348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:01:21][352677531311545][321 ms][DEBUG] targetPkg: running [2025-09-06 12:01:21][352677531311545][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-06 12:01:21][352677531311545][321 ms][DEBUG] START check_boot_completed [2025-09-06 12:01:21][352677531311545][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:01:21][352677531311545][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:01:21][352677531311545][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:01:21][352677531311545][430 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:01:21][352677531311545][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:01:21][352677531311545][430 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:01:21][352677531311545][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531311545\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2601\"}'\'' -e'"" [2025-09-06 12:01:21][352677531311545][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:01:21][352677531311545][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531311545\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2601\"}'\'' -e'"" [2025-09-06 12:01:24][352677531311545][3836 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3a0ab98-def2-4799-9df5-8436a6fd7959","id":"QR_f3a0ab98-def2-4799-9df5-8436a6fd7959","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:01:24][352677531311545][3992 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-06 12:01:24][352677531311545][3992 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-09-06 12:01:24][352677531311545][3992 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:01:27][352677531311545][0 ms][INFO] === Request start === [2025-09-06 12:01:27][352677531311545][1 ms][DEBUG] START check_scloud [2025-09-06 12:01:27][352677531311545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:01:27][352677531311545][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11530 4970 24774840 139588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:01:27][352677531311545][320 ms][DEBUG] targetPkg: running [2025-09-06 12:01:27][352677531311545][320 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 12:01:27][352677531311545][320 ms][DEBUG] START check_boot_completed [2025-09-06 12:01:27][352677531311545][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:01:27][352677531311545][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:01:27][352677531311545][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:01:27][352677531311545][416 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 12:01:27][352677531311545][416 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 12:01:27][352677531311545][416 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:01:27][352677531311545][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531311545\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1039\"}'\'' -e'"" [2025-09-06 12:01:27][352677531311545][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:01:27][352677531311545][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531311545\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1039\"}'\'' -e'"" [2025-09-06 12:01:32][352677531311545][5272 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2445c0d-8ab1-41ef-9a67-0ebfeb52052f","id":"QR_f2445c0d-8ab1-41ef-9a67-0ebfeb52052f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:01:32][352677531311545][5428 ms][DEBUG] proc_open done in 5012 ms; code=255; res.len=3343 [2025-09-06 12:01:32][352677531311545][5428 ms][DEBUG] END runCmdUntilRes#1 in 5012 ms [2025-09-06 12:01:32][352677531311545][5428 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:02:03][354130547306503][0 ms][INFO] === Request start === [2025-09-06 12:02:03][354130547306503][1 ms][DEBUG] START check_scloud [2025-09-06 12:02:03][354130547306503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:02:04][354130547306503][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 11530 4970 24859860 146696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:02:04][354130547306503][303 ms][DEBUG] targetPkg: running [2025-09-06 12:02:04][354130547306503][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 12:02:04][354130547306503][303 ms][DEBUG] START check_boot_completed [2025-09-06 12:02:04][354130547306503][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:02:04][354130547306503][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:02:04][354130547306503][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:02:04][354130547306503][412 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:02:04][354130547306503][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:02:04][354130547306503][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:02:04][354130547306503][521 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1032\nsuccessfulTxPacketsPerSecond: 1.0966731549789366\nretriedTxPackets: 171\nretriedTxPacketsPerSecond: 0.22661880693291678\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1063\nsuccessfulRxPacketsPerSecond: 0.9793169871029618\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:02:04][354130547306503][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:02:04][354130547306503][849 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.215/228.215/228.215/0.000 ms\n [2025-09-06 12:02:04][354130547306503][849 ms][DEBUG] check_internet: online [2025-09-06 12:02:04][354130547306503][849 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:02:04][354130547306503][849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130547306503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5579\"}'\'' -e'"" [2025-09-06 12:02:04][354130547306503][849 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:02:04][354130547306503][849 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130547306503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5579\"}'\'' -e'"" [2025-09-06 12:02:08][354130547306503][4708 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a49d6f7-ebb0-42f9-bb9d-9c1b8e1c894d","id":"QR_3a49d6f7-ebb0-42f9-bb9d-9c1b8e1c894d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:02:08][354130547306503][4864 ms][DEBUG] proc_open done in 4015 ms; code=255; res.len=3343 [2025-09-06 12:02:08][354130547306503][4864 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-09-06 12:02:08][354130547306503][4864 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:02:10][354130547306503][0 ms][INFO] === Request start === [2025-09-06 12:02:10][354130547306503][1 ms][DEBUG] START check_scloud [2025-09-06 12:02:10][354130547306503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:02:11][354130547306503][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 11530 4970 25020892 157128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:02:11][354130547306503][317 ms][DEBUG] targetPkg: running [2025-09-06 12:02:11][354130547306503][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 12:02:11][354130547306503][317 ms][DEBUG] START check_boot_completed [2025-09-06 12:02:11][354130547306503][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:02:11][354130547306503][362 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 12:02:11][354130547306503][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:02:11][354130547306503][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:02:11][354130547306503][409 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 12:02:11][354130547306503][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:02:11][354130547306503][519 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1032\nsuccessfulTxPacketsPerSecond: 1.0966731549789366\nretriedTxPackets: 171\nretriedTxPacketsPerSecond: 0.22661880693291678\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1063\nsuccessfulRxPacketsPerSecond: 0.9793169871029618\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:02:11][354130547306503][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:02:11][354130547306503][862 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.625/228.625/228.625/0.000 ms\n [2025-09-06 12:02:11][354130547306503][862 ms][DEBUG] check_internet: online [2025-09-06 12:02:11][354130547306503][862 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:02:11][354130547306503][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130547306503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4272\"}'\'' -e'"" [2025-09-06 12:02:11][354130547306503][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:02:11][354130547306503][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130547306503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4272\"}'\'' -e'"" [2025-09-06 12:02:16][354130547306503][5158 ms][DEBUG] proc_open done in 4295 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 12:02:16][354130547306503][5158 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-09-06 12:02:16][354130547306503][5158 ms][WARN] Detected error: Process with pid 11530 either refused to load frida-agent, or terminated during injectionProcess with pid 11530 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 12:02:16][354130547306503][5158 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 12:02:16][354130547306503][5408 ms][DEBUG] SU: done in 250 ms; outsystem 5388 4970 13184740 574796 ep_poll 0 S system_server\n [2025-09-06 12:02:16][354130547306503][5408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 12:02:16][354130547306503][5548 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 12:02:16][354130547306503][5548 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 12:02:16][354130547306503][5549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 12:02:16][354130547306503][5675 ms][DEBUG] SU: done in 126 ms; out [2025-09-06 12:02:16][354130547306503][5675 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 12:02:16][354130547306503][5892 ms][DEBUG] SU: done in 217 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 12:02:18][354130547306503][7907 ms][DEBUG] START check_boot_completed [2025-09-06 12:02:18][354130547306503][7907 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:02:18][354130547306503][7954 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:02:18][354130547306503][7954 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:02:18][354130547306503][8001 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:02:18][354130547306503][8001 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:02:21][354130547306503][11016 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 12:02:21][354130547306503][11016 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130547306503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4272\"}'\'' -e'"" [2025-09-06 12:02:26][354130547306503][16093 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a71e64fd-dbf7-4bc5-93b9-a62548215448","id":"QR_a71e64fd-dbf7-4bc5-93b9-a62548215448","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:02:27][354130547306503][16249 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-06 12:02:27][354130547306503][16249 ms][DEBUG] END runCmdUntilRes#2 in 5233 ms [2025-09-06 12:02:27][354130547306503][16249 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:03:03][352397456203193][0 ms][INFO] === Request start === [2025-09-06 12:03:03][352397456203193][1 ms][DEBUG] START check_scloud [2025-09-06 12:03:03][352397456203193][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:03:03][352397456203193][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 18707 4970 23775092 127044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:03:03][352397456203193][259 ms][DEBUG] targetPkg: running [2025-09-06 12:03:03][352397456203193][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-06 12:03:03][352397456203193][259 ms][DEBUG] START check_boot_completed [2025-09-06 12:03:03][352397456203193][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:03:03][352397456203193][305 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:03:03][352397456203193][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:03:04][352397456203193][352 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:03:04][352397456203193][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:03:04][352397456203193][352 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:03:04][352397456203193][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456203193\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6381\"}'\'' -e'"" [2025-09-06 12:03:04][352397456203193][352 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:03:04][352397456203193][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456203193\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6381\"}'\'' -e'"" [2025-09-06 12:03:07][352397456203193][4086 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82f4b4a0-fc81-496e-a653-13b463b8fa4e","id":"QR_82f4b4a0-fc81-496e-a653-13b463b8fa4e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:03:07][352397456203193][4242 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=3343 [2025-09-06 12:03:07][352397456203193][4242 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-09-06 12:03:07][352397456203193][4242 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:03:10][352397456203193][1 ms][INFO] === Request start === [2025-09-06 12:03:10][352397456203193][1 ms][DEBUG] START check_scloud [2025-09-06 12:03:10][352397456203193][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:03:10][352397456203193][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 18707 4970 23949400 137824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:03:10][352397456203193][254 ms][DEBUG] targetPkg: running [2025-09-06 12:03:10][352397456203193][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 12:03:10][352397456203193][254 ms][DEBUG] START check_boot_completed [2025-09-06 12:03:10][352397456203193][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:03:10][352397456203193][301 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:03:10][352397456203193][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:03:10][352397456203193][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:03:10][352397456203193][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:03:10][352397456203193][348 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:03:10][352397456203193][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456203193\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3722\"}'\'' -e'"" [2025-09-06 12:03:10][352397456203193][348 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:03:10][352397456203193][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456203193\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3722\"}'\'' -e'"" [2025-09-06 12:03:15][352397456203193][5143 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf34d72f-5ef7-4674-9c34-b17b5aba8e90","id":"QR_cf34d72f-5ef7-4674-9c34-b17b5aba8e90","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:03:15][352397456203193][5300 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-06 12:03:15][352397456203193][5300 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-06 12:03:15][352397456203193][5300 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:05:03][351272339988404][0 ms][INFO] === Request start === [2025-09-06 12:05:03][351272339988404][1 ms][DEBUG] START check_scloud [2025-09-06 12:05:03][351272339988404][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:05:04][351272339988404][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 18707 4970 24062220 149708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:05:04][351272339988404][314 ms][DEBUG] targetPkg: running [2025-09-06 12:05:04][351272339988404][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 12:05:04][351272339988404][314 ms][DEBUG] START check_boot_completed [2025-09-06 12:05:04][351272339988404][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:05:04][351272339988404][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:05:04][351272339988404][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:05:04][351272339988404][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:05:04][351272339988404][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:05:04][351272339988404][408 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:05:04][351272339988404][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272339988404\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2934\"}'\'' -e'"" [2025-09-06 12:05:04][351272339988404][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:05:04][351272339988404][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272339988404\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2934\"}'\'' -e'"" [2025-09-06 12:05:09][351272339988404][5735 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4eaefd4-be50-48bc-8395-2e14c10e17fd","id":"QR_e4eaefd4-be50-48bc-8395-2e14c10e17fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:05:09][351272339988404][5891 ms][DEBUG] proc_open done in 5483 ms; code=255; res.len=3343 [2025-09-06 12:05:09][351272339988404][5891 ms][DEBUG] END runCmdUntilRes#1 in 5483 ms [2025-09-06 12:05:09][351272339988404][5891 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:05:12][351272339988404][1 ms][INFO] === Request start === [2025-09-06 12:05:12][351272339988404][1 ms][DEBUG] START check_scloud [2025-09-06 12:05:12][351272339988404][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:05:12][351272339988404][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 18707 4970 24187732 160520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:05:12][351272339988404][312 ms][DEBUG] targetPkg: running [2025-09-06 12:05:12][351272339988404][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 12:05:12][351272339988404][312 ms][DEBUG] START check_boot_completed [2025-09-06 12:05:12][351272339988404][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:05:12][351272339988404][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:05:12][351272339988404][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:05:12][351272339988404][423 ms][DEBUG] SU: done in 64 ms; out [2025-09-06 12:05:12][351272339988404][423 ms][DEBUG] END check_boot_completed in 111 ms [2025-09-06 12:05:12][351272339988404][423 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:05:12][351272339988404][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272339988404\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6935\"}'\'' -e'"" [2025-09-06 12:05:12][351272339988404][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:05:12][351272339988404][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272339988404\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6935\"}'\'' -e'"" [2025-09-06 12:05:17][351272339988404][5482 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_271f69cb-985b-4e83-a235-b2929ea12878","id":"QR_271f69cb-985b-4e83-a235-b2929ea12878","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:05:17][351272339988404][5639 ms][DEBUG] proc_open done in 5215 ms; code=255; res.len=3343 [2025-09-06 12:05:17][351272339988404][5639 ms][DEBUG] END runCmdUntilRes#1 in 5215 ms [2025-09-06 12:05:17][351272339988404][5639 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:05:21][350013882317315][0 ms][INFO] === Request start === [2025-09-06 12:05:21][350013882317315][1 ms][DEBUG] START check_scloud [2025-09-06 12:05:21][350013882317315][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:05:22][350013882317315][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 18707 4970 24348700 172252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:05:22][350013882317315][316 ms][DEBUG] targetPkg: running [2025-09-06 12:05:22][350013882317315][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 12:05:22][350013882317315][316 ms][DEBUG] START check_boot_completed [2025-09-06 12:05:22][350013882317315][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:05:22][350013882317315][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:05:22][350013882317315][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:05:22][350013882317315][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:05:22][350013882317315][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:05:22][350013882317315][409 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:05:22][350013882317315][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882317315\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9177\"}'\'' -e'"" [2025-09-06 12:05:22][350013882317315][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:05:22][350013882317315][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882317315\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9177\"}'\'' -e'"" [2025-09-06 12:05:25][350013882317315][3893 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b8040f6-313b-4596-ac5c-b2335c583056","id":"QR_7b8040f6-313b-4596-ac5c-b2335c583056","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:05:25][350013882317315][4049 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-09-06 12:05:25][350013882317315][4049 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-06 12:05:25][350013882317315][4049 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:05:28][350013882317315][0 ms][INFO] === Request start === [2025-09-06 12:05:28][350013882317315][1 ms][DEBUG] START check_scloud [2025-09-06 12:05:28][350013882317315][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:05:28][350013882317315][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 18707 4970 24503424 183104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:05:28][350013882317315][304 ms][DEBUG] targetPkg: running [2025-09-06 12:05:28][350013882317315][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 12:05:28][350013882317315][304 ms][DEBUG] START check_boot_completed [2025-09-06 12:05:28][350013882317315][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:05:28][350013882317315][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:05:28][350013882317315][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:05:28][350013882317315][445 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 12:05:28][350013882317315][445 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 12:05:28][350013882317315][445 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:05:28][350013882317315][445 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882317315\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3636\"}'\'' -e'"" [2025-09-06 12:05:28][350013882317315][445 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:05:28][350013882317315][445 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882317315\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3636\"}'\'' -e'"" [2025-09-06 12:05:33][350013882317315][5303 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b18d231-931a-4f7e-bd1b-da6641cd36ab","id":"QR_3b18d231-931a-4f7e-bd1b-da6641cd36ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:05:33][350013882317315][5459 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 12:05:33][350013882317315][5459 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 12:05:33][350013882317315][5459 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:10:03][352549939489753][1 ms][INFO] === Request start === [2025-09-06 12:10:03][352549939489753][1 ms][DEBUG] START check_scloud [2025-09-06 12:10:03][352549939489753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:10:04][352549939489753][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 18707 4970 24602780 194304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:10:04][352549939489753][301 ms][DEBUG] targetPkg: running [2025-09-06 12:10:04][352549939489753][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-06 12:10:04][352549939489753][301 ms][DEBUG] START check_boot_completed [2025-09-06 12:10:04][352549939489753][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:10:04][352549939489753][346 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 12:10:04][352549939489753][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:10:04][352549939489753][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:10:04][352549939489753][393 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 12:10:04][352549939489753][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:10:04][352549939489753][518 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1676\nsuccessfulTxPacketsPerSecond: 0.47148980818333647\nretriedTxPackets: 288\nretriedTxPacketsPerSecond: 0.10625122437934344\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1623\nsuccessfulRxPacketsPerSecond: 0.4084031437081013\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:10:04][352549939489753][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:10:05][352549939489753][1845 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.317/302.317/302.317/0.000 ms\n [2025-09-06 12:10:05][352549939489753][1845 ms][DEBUG] check_internet: online [2025-09-06 12:10:05][352549939489753][1845 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:10:05][352549939489753][1846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939489753\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7373\"}'\'' -e'"" [2025-09-06 12:10:05][352549939489753][1846 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:10:05][352549939489753][1846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939489753\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7373\"}'\'' -e'"" [2025-09-06 12:10:09][352549939489753][5641 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b0321ae-71a7-4efc-82a0-f12298866b24","id":"QR_6b0321ae-71a7-4efc-82a0-f12298866b24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:10:09][352549939489753][5798 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-06 12:10:09][352549939489753][5798 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-06 12:10:09][352549939489753][5798 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:10:12][352549939489753][0 ms][INFO] === Request start === [2025-09-06 12:10:12][352549939489753][1 ms][DEBUG] START check_scloud [2025-09-06 12:10:12][352549939489753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:10:12][352549939489753][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 18707 4970 24739236 205828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:10:12][352549939489753][309 ms][DEBUG] targetPkg: running [2025-09-06 12:10:12][352549939489753][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 12:10:12][352549939489753][309 ms][DEBUG] START check_boot_completed [2025-09-06 12:10:12][352549939489753][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:10:12][352549939489753][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:10:12][352549939489753][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:10:12][352549939489753][418 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 12:10:12][352549939489753][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:10:12][352549939489753][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:10:12][352549939489753][544 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1676\nsuccessfulTxPacketsPerSecond: 0.47148980818333647\nretriedTxPackets: 288\nretriedTxPacketsPerSecond: 0.10625122437934344\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1623\nsuccessfulRxPacketsPerSecond: 0.4084031437081013\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:10:12][352549939489753][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:10:13][352549939489753][918 ms][DEBUG] SU: done in 373 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=266 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 266.664/266.664/266.664/0.000 ms\n [2025-09-06 12:10:13][352549939489753][918 ms][DEBUG] check_internet: online [2025-09-06 12:10:13][352549939489753][918 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:10:13][352549939489753][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939489753\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7095\"}'\'' -e'"" [2025-09-06 12:10:13][352549939489753][918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:10:13][352549939489753][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939489753\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7095\"}'\'' -e'"" [2025-09-06 12:10:18][352549939489753][6073 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e201475-d174-4e86-a1b1-4886b1067731","id":"QR_8e201475-d174-4e86-a1b1-4886b1067731","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:10:18][352549939489753][6229 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 12:10:18][352549939489753][6229 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 12:10:18][352549939489753][6229 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:12:03][350536250236972][1 ms][INFO] === Request start === [2025-09-06 12:12:03][350536250236972][1 ms][DEBUG] START check_scloud [2025-09-06 12:12:03][350536250236972][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:12:03][350536250236972][253 ms][DEBUG] SU: done in 251 ms; outu0_a118 18707 4970 24857216 215452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:12:03][350536250236972][253 ms][DEBUG] targetPkg: running [2025-09-06 12:12:03][350536250236972][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-06 12:12:03][350536250236972][253 ms][DEBUG] START check_boot_completed [2025-09-06 12:12:03][350536250236972][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:12:03][350536250236972][299 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:12:03][350536250236972][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:12:03][350536250236972][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:12:03][350536250236972][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:12:03][350536250236972][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:12:04][350536250236972][471 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1757\nsuccessfulTxPacketsPerSecond: 0.6247396917950854\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.16968238542582567\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1692\nsuccessfulRxPacketsPerSecond: 0.5321856633809987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:12:04][350536250236972][471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:12:04][350536250236972][861 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.350/290.350/290.350/0.000 ms\n [2025-09-06 12:12:04][350536250236972][862 ms][DEBUG] check_internet: online [2025-09-06 12:12:04][350536250236972][862 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:12:04][350536250236972][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536250236972\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6391\"}'\'' -e'"" [2025-09-06 12:12:04][350536250236972][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:12:04][350536250236972][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536250236972\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6391\"}'\'' -e'"" [2025-09-06 12:12:09][350536250236972][5829 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9af97162-105f-4583-b692-af6608238d8b","id":"QR_9af97162-105f-4583-b692-af6608238d8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:12:09][350536250236972][5985 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-06 12:12:09][350536250236972][5985 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-06 12:12:09][350536250236972][5986 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:12:11][350536250236972][1 ms][INFO] === Request start === [2025-09-06 12:12:11][350536250236972][1 ms][DEBUG] START check_scloud [2025-09-06 12:12:11][350536250236972][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:12:12][350536250236972][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 18707 4970 24981260 209704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:12:12][350536250236972][314 ms][DEBUG] targetPkg: running [2025-09-06 12:12:12][350536250236972][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 12:12:12][350536250236972][314 ms][DEBUG] START check_boot_completed [2025-09-06 12:12:12][350536250236972][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:12:12][350536250236972][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:12:12][350536250236972][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:12:12][350536250236972][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:12:12][350536250236972][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:12:12][350536250236972][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:12:12][350536250236972][532 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1757\nsuccessfulTxPacketsPerSecond: 0.6247396917950854\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.16968238542582567\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1692\nsuccessfulRxPacketsPerSecond: 0.5321856633809987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:12:12][350536250236972][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:12:12][350536250236972][938 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=311 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 311.389/311.389/311.389/0.000 ms\n [2025-09-06 12:12:12][350536250236972][938 ms][DEBUG] check_internet: online [2025-09-06 12:12:12][350536250236972][938 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:12:12][350536250236972][939 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536250236972\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3285\"}'\'' -e'"" [2025-09-06 12:12:12][350536250236972][939 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:12:12][350536250236972][939 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536250236972\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3285\"}'\'' -e'"" [2025-09-06 12:12:18][350536250236972][6500 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6db9937-0f74-4078-9bd3-87f4e44be5a1","id":"QR_c6db9937-0f74-4078-9bd3-87f4e44be5a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:12:18][350536250236972][6656 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-06 12:12:18][350536250236972][6656 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-06 12:12:18][350536250236972][6656 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:12:22][356356730210453][1 ms][INFO] === Request start === [2025-09-06 12:12:22][356356730210453][1 ms][DEBUG] START check_scloud [2025-09-06 12:12:22][356356730210453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:12:23][356356730210453][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 18707 4970 25121812 211680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:12:23][356356730210453][305 ms][DEBUG] targetPkg: running [2025-09-06 12:12:23][356356730210453][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 12:12:23][356356730210453][305 ms][DEBUG] START check_boot_completed [2025-09-06 12:12:23][356356730210453][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:12:23][356356730210453][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:12:23][356356730210453][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:12:23][356356730210453][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:12:23][356356730210453][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:12:23][356356730210453][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:12:23][356356730210453][492 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1757\nsuccessfulTxPacketsPerSecond: 0.6247396917950854\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.16968238542582567\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1692\nsuccessfulRxPacketsPerSecond: 0.5321856633809987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:12:23][356356730210453][492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:12:23][356356730210453][898 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=314 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 314.747/314.747/314.747/0.000 ms\n [2025-09-06 12:12:23][356356730210453][898 ms][DEBUG] check_internet: online [2025-09-06 12:12:23][356356730210453][898 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:12:23][356356730210453][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356730210453\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6087\"}'\'' -e'"" [2025-09-06 12:12:23][356356730210453][898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:12:23][356356730210453][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356730210453\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6087\"}'\'' -e'"" [2025-09-06 12:12:27][356356730210453][5022 ms][DEBUG] proc_open done in 4124 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 12:12:27][356356730210453][5022 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-09-06 12:12:27][356356730210453][5022 ms][WARN] Detected error: Process with pid 18707 either refused to load frida-agent, or terminated during injectionProcess with pid 18707 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 12:12:27][356356730210453][5022 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 12:12:28][356356730210453][5289 ms][DEBUG] SU: done in 266 ms; outsystem 5388 4970 12606900 250940 ep_poll 0 S system_server\n [2025-09-06 12:12:28][356356730210453][5289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 12:12:28][356356730210453][5444 ms][DEBUG] SU: done in 155 ms; out [2025-09-06 12:12:28][356356730210453][5444 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 12:12:28][356356730210453][5444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 12:12:28][356356730210453][5570 ms][DEBUG] SU: done in 126 ms; out [2025-09-06 12:12:28][356356730210453][5570 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 12:12:28][356356730210453][5741 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 12:12:30][356356730210453][7756 ms][DEBUG] START check_boot_completed [2025-09-06 12:12:30][356356730210453][7756 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:12:30][356356730210453][7803 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:12:30][356356730210453][7803 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:12:30][356356730210453][7849 ms][DEBUG] SU: done in 46 ms; out [2025-09-06 12:12:30][356356730210453][7849 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:12:33][356356730210453][10864 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 12:12:33][356356730210453][10864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356730210453\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6087\"}'\'' -e'"" [2025-09-06 12:12:37][356356730210453][14301 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_801bd792-c86a-46e1-a70c-b35f707a3b50","id":"QR_801bd792-c86a-46e1-a70c-b35f707a3b50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:12:37][356356730210453][14457 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=3343 [2025-09-06 12:12:37][356356730210453][14457 ms][DEBUG] END runCmdUntilRes#2 in 3593 ms [2025-09-06 12:12:37][356356730210453][14457 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:12:39][356356730210453][0 ms][INFO] === Request start === [2025-09-06 12:12:39][356356730210453][1 ms][DEBUG] START check_scloud [2025-09-06 12:12:39][356356730210453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:12:39][356356730210453][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 20261 4970 23740388 122616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:12:39][356356730210453][273 ms][DEBUG] targetPkg: running [2025-09-06 12:12:39][356356730210453][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-06 12:12:39][356356730210453][273 ms][DEBUG] START check_boot_completed [2025-09-06 12:12:39][356356730210453][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:12:39][356356730210453][320 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:12:39][356356730210453][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:12:40][356356730210453][398 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 12:12:40][356356730210453][398 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 12:12:40][356356730210453][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:12:40][356356730210453][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1757\nsuccessfulTxPacketsPerSecond: 0.6247396917950854\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.16968238542582567\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1692\nsuccessfulRxPacketsPerSecond: 0.5321856633809987\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:12:40][356356730210453][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:12:40][356356730210453][898 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.728/282.728/282.728/0.000 ms\n [2025-09-06 12:12:40][356356730210453][898 ms][DEBUG] check_internet: online [2025-09-06 12:12:40][356356730210453][898 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:12:40][356356730210453][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356730210453\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1282\"}'\'' -e'"" [2025-09-06 12:12:40][356356730210453][898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:12:40][356356730210453][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356730210453\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1282\"}'\'' -e'"" [2025-09-06 12:12:45][356356730210453][6146 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e65218d1-c089-4255-8b98-7fe423bb86cb","id":"QR_e65218d1-c089-4255-8b98-7fe423bb86cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:12:45][356356730210453][6303 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=3343 [2025-09-06 12:12:45][356356730210453][6303 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-09-06 12:12:45][356356730210453][6303 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:13:03][351771925070626][0 ms][INFO] === Request start === [2025-09-06 12:13:03][351771925070626][1 ms][DEBUG] START check_scloud [2025-09-06 12:13:03][351771925070626][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:13:03][351771925070626][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 20261 4970 23791488 136536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:13:03][351771925070626][307 ms][DEBUG] targetPkg: running [2025-09-06 12:13:03][351771925070626][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 12:13:03][351771925070626][307 ms][DEBUG] START check_boot_completed [2025-09-06 12:13:03][351771925070626][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:13:03][351771925070626][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:13:03][351771925070626][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:13:03][351771925070626][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:13:03][351771925070626][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:13:03][351771925070626][400 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:13:03][351771925070626][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771925070626\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9108\"}'\'' -e'"" [2025-09-06 12:13:03][351771925070626][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:13:03][351771925070626][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771925070626\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9108\"}'\'' -e'"" [2025-09-06 12:13:07][351771925070626][3774 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42021d8e-d052-4df5-b263-225d646cff0e","id":"QR_42021d8e-d052-4df5-b263-225d646cff0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:13:07][351771925070626][3931 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-06 12:13:07][351771925070626][3931 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-09-06 12:13:07][351771925070626][3931 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:13:09][351771925070626][1 ms][INFO] === Request start === [2025-09-06 12:13:09][351771925070626][1 ms][DEBUG] START check_scloud [2025-09-06 12:13:09][351771925070626][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:13:10][351771925070626][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 20261 4970 23934152 148276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:13:10][351771925070626][315 ms][DEBUG] targetPkg: running [2025-09-06 12:13:10][351771925070626][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 12:13:10][351771925070626][315 ms][DEBUG] START check_boot_completed [2025-09-06 12:13:10][351771925070626][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:13:10][351771925070626][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:13:10][351771925070626][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:13:10][351771925070626][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:13:10][351771925070626][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:13:10][351771925070626][408 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:13:10][351771925070626][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771925070626\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4934\"}'\'' -e'"" [2025-09-06 12:13:10][351771925070626][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:13:10][351771925070626][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771925070626\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4934\"}'\'' -e'"" [2025-09-06 12:13:14][351771925070626][5016 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0bdb68eb-015a-4203-818b-e68e8bcc6331","id":"QR_0bdb68eb-015a-4203-818b-e68e8bcc6331","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:13:15][351771925070626][5173 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-06 12:13:15][351771925070626][5173 ms][DEBUG] END runCmdUntilRes#1 in 4765 ms [2025-09-06 12:13:15][351771925070626][5173 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:13:19][351786692904344][0 ms][INFO] === Request start === [2025-09-06 12:13:19][351786692904344][1 ms][DEBUG] START check_scloud [2025-09-06 12:13:19][351786692904344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:13:19][351786692904344][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 20261 4970 24076688 159060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:13:19][351786692904344][309 ms][DEBUG] targetPkg: running [2025-09-06 12:13:19][351786692904344][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 12:13:19][351786692904344][309 ms][DEBUG] START check_boot_completed [2025-09-06 12:13:19][351786692904344][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:13:19][351786692904344][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:13:19][351786692904344][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:13:19][351786692904344][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:13:19][351786692904344][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:13:19][351786692904344][403 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:13:19][351786692904344][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692904344\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4268\"}'\'' -e'"" [2025-09-06 12:13:19][351786692904344][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:13:19][351786692904344][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692904344\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4268\"}'\'' -e'"" [2025-09-06 12:13:24][351786692904344][4995 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58970984-35a5-47ad-8cdb-86b7a87b5594","id":"QR_58970984-35a5-47ad-8cdb-86b7a87b5594","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:13:24][351786692904344][5151 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-06 12:13:24][351786692904344][5151 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-09-06 12:13:24][351786692904344][5151 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:13:26][351786692904344][1 ms][INFO] === Request start === [2025-09-06 12:13:26][351786692904344][1 ms][DEBUG] START check_scloud [2025-09-06 12:13:26][351786692904344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:13:27][351786692904344][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 20261 4970 24222252 170080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:13:27][351786692904344][300 ms][DEBUG] targetPkg: running [2025-09-06 12:13:27][351786692904344][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 12:13:27][351786692904344][300 ms][DEBUG] START check_boot_completed [2025-09-06 12:13:27][351786692904344][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:13:27][351786692904344][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:13:27][351786692904344][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:13:27][351786692904344][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:13:27][351786692904344][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 12:13:27][351786692904344][379 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:13:27][351786692904344][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692904344\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3180\"}'\'' -e'"" [2025-09-06 12:13:27][351786692904344][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:13:27][351786692904344][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692904344\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3180\"}'\'' -e'"" [2025-09-06 12:13:32][351786692904344][5471 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d381e68-275a-4e6c-b584-ca808836e526","id":"QR_2d381e68-275a-4e6c-b584-ca808836e526","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:13:32][351786692904344][5627 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-06 12:13:32][351786692904344][5627 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-06 12:13:32][351786692904344][5627 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:19:03][358692300661081][1 ms][INFO] === Request start === [2025-09-06 12:19:03][358692300661081][1 ms][DEBUG] START check_scloud [2025-09-06 12:19:03][358692300661081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:19:03][358692300661081][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 20261 4970 24321688 182272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:19:03][358692300661081][309 ms][DEBUG] targetPkg: running [2025-09-06 12:19:03][358692300661081][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 12:19:03][358692300661081][309 ms][DEBUG] START check_boot_completed [2025-09-06 12:19:03][358692300661081][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:19:03][358692300661081][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:19:03][358692300661081][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:19:03][358692300661081][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:19:03][358692300661081][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 12:19:03][358692300661081][387 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:19:03][358692300661081][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358692300661081\",\"model\":\"SM-F936N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9907\"}'\'' -e'"" [2025-09-06 12:19:03][358692300661081][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:19:03][358692300661081][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358692300661081\",\"model\":\"SM-F936N\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9907\"}'\'' -e'"" [2025-09-06 12:19:08][358692300661081][4761 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_475fafc2-41a0-45c1-8cc0-3c433bcdea4e","id":"QR_475fafc2-41a0-45c1-8cc0-3c433bcdea4e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:19:08][358692300661081][4917 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-09-06 12:19:08][358692300661081][4917 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-06 12:19:08][358692300661081][4917 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:19:10][358692300661081][0 ms][INFO] === Request start === [2025-09-06 12:19:10][358692300661081][1 ms][DEBUG] START check_scloud [2025-09-06 12:19:10][358692300661081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:19:10][358692300661081][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 20261 4970 24501024 193220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:19:10][358692300661081][305 ms][DEBUG] targetPkg: running [2025-09-06 12:19:10][358692300661081][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 12:19:10][358692300661081][305 ms][DEBUG] START check_boot_completed [2025-09-06 12:19:10][358692300661081][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:19:11][358692300661081][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:19:11][358692300661081][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:19:11][358692300661081][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:19:11][358692300661081][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:19:11][358692300661081][399 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:19:11][358692300661081][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358692300661081\",\"model\":\"SM-F936N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9675\"}'\'' -e'"" [2025-09-06 12:19:11][358692300661081][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:19:11][358692300661081][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358692300661081\",\"model\":\"SM-F936N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9675\"}'\'' -e'"" [2025-09-06 12:19:17][358692300661081][7116 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eaa2d209-04e4-48da-8372-d44d05d64264","id":"QR_eaa2d209-04e4-48da-8372-d44d05d64264","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:19:17][358692300661081][7272 ms][DEBUG] proc_open done in 6873 ms; code=255; res.len=3343 [2025-09-06 12:19:17][358692300661081][7272 ms][DEBUG] END runCmdUntilRes#1 in 6873 ms [2025-09-06 12:19:17][358692300661081][7272 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:19:22][350247870771824][1 ms][INFO] === Request start === [2025-09-06 12:19:22][350247870771824][1 ms][DEBUG] START check_scloud [2025-09-06 12:19:22][350247870771824][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:19:22][350247870771824][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 20261 4970 24657896 204988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:19:22][350247870771824][292 ms][DEBUG] targetPkg: running [2025-09-06 12:19:22][350247870771824][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 12:19:22][350247870771824][292 ms][DEBUG] START check_boot_completed [2025-09-06 12:19:22][350247870771824][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:19:22][350247870771824][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:19:22][350247870771824][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:19:22][350247870771824][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:19:22][350247870771824][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 12:19:22][350247870771824][370 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:19:22][350247870771824][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247870771824\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5246\"}'\'' -e'"" [2025-09-06 12:19:22][350247870771824][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:19:22][350247870771824][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247870771824\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5246\"}'\'' -e'"" [2025-09-06 12:19:26][350247870771824][4088 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_040bf029-171f-4f41-a554-fe19c94aca56","id":"QR_040bf029-171f-4f41-a554-fe19c94aca56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:19:26][350247870771824][4244 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-09-06 12:19:26][350247870771824][4244 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-06 12:19:26][350247870771824][4244 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:19:33][350247870771824][0 ms][INFO] === Request start === [2025-09-06 12:19:33][350247870771824][1 ms][DEBUG] START check_scloud [2025-09-06 12:19:33][350247870771824][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:19:34][350247870771824][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 20261 4970 24753192 215932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:19:34][350247870771824][312 ms][DEBUG] targetPkg: running [2025-09-06 12:19:34][350247870771824][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 12:19:34][350247870771824][312 ms][DEBUG] START check_boot_completed [2025-09-06 12:19:34][350247870771824][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:19:34][350247870771824][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:19:34][350247870771824][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:19:34][350247870771824][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:19:34][350247870771824][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:19:34][350247870771824][405 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:19:34][350247870771824][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247870771824\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9942\"}'\'' -e'"" [2025-09-06 12:19:34][350247870771824][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:19:34][350247870771824][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247870771824\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9942\"}'\'' -e'"" [2025-09-06 12:19:38][350247870771824][5091 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eceb9d77-c780-49af-999c-b2def7658e8f","id":"QR_eceb9d77-c780-49af-999c-b2def7658e8f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:19:39][350247870771824][5248 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-06 12:19:39][350247870771824][5248 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-06 12:19:39][350247870771824][5248 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:20:04][354882173547897][0 ms][INFO] === Request start === [2025-09-06 12:20:04][354882173547897][1 ms][DEBUG] START check_scloud [2025-09-06 12:20:04][354882173547897][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:20:04][354882173547897][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 20261 4970 24850664 228032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:20:04][354882173547897][303 ms][DEBUG] targetPkg: running [2025-09-06 12:20:04][354882173547897][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 12:20:04][354882173547897][303 ms][DEBUG] START check_boot_completed [2025-09-06 12:20:04][354882173547897][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:20:04][354882173547897][333 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 12:20:04][354882173547897][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:20:04][354882173547897][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:20:04][354882173547897][380 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 12:20:04][354882173547897][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:20:04][354882173547897][505 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1980\nsuccessfulTxPacketsPerSecond: 0.7379121388201347\nretriedTxPackets: 367\nretriedTxPacketsPerSecond: 0.1886143135100793\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1887\nsuccessfulRxPacketsPerSecond: 0.6452594935871133\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:20:04][354882173547897][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:20:05][354882173547897][1567 ms][DEBUG] SU: done in 1062 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.497/221.497/221.497/0.000 ms\n [2025-09-06 12:20:05][354882173547897][1567 ms][DEBUG] check_internet: online [2025-09-06 12:20:05][354882173547897][1567 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:20:05][354882173547897][1567 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354882173547897\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6372\"}'\'' -e'"" [2025-09-06 12:20:05][354882173547897][1567 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:20:05][354882173547897][1567 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354882173547897\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6372\"}'\'' -e'"" [2025-09-06 12:20:09][354882173547897][5675 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff7419f4-aaec-4d99-8780-4dcb3cec9d30","id":"QR_ff7419f4-aaec-4d99-8780-4dcb3cec9d30","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:20:10][354882173547897][5831 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-09-06 12:20:10][354882173547897][5831 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-09-06 12:20:10][354882173547897][5831 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:20:12][350616251505557][0 ms][INFO] === Request start === [2025-09-06 12:20:12][350616251505557][1 ms][DEBUG] START check_scloud [2025-09-06 12:20:12][350616251505557][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:20:12][350616251505557][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 20261 4970 24989044 238824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:20:12][350616251505557][258 ms][DEBUG] targetPkg: running [2025-09-06 12:20:12][350616251505557][258 ms][DEBUG] END check_scloud in 258 ms [2025-09-06 12:20:12][350616251505557][258 ms][DEBUG] START check_boot_completed [2025-09-06 12:20:12][350616251505557][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:20:12][350616251505557][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:20:12][350616251505557][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:20:12][350616251505557][368 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:20:12][350616251505557][368 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:20:12][350616251505557][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:20:12][350616251505557][493 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1980\nsuccessfulTxPacketsPerSecond: 0.7379121388201347\nretriedTxPackets: 367\nretriedTxPacketsPerSecond: 0.1886143135100793\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1887\nsuccessfulRxPacketsPerSecond: 0.6452594935871133\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:20:12][350616251505557][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:20:13][350616251505557][899 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.320/269.320/269.320/0.000 ms\n [2025-09-06 12:20:13][350616251505557][899 ms][DEBUG] check_internet: online [2025-09-06 12:20:13][350616251505557][899 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:20:13][350616251505557][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251505557\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6515\"}'\'' -e'"" [2025-09-06 12:20:13][350616251505557][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:20:13][350616251505557][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251505557\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6515\"}'\'' -e'"" [2025-09-06 12:20:17][350616251505557][4664 ms][DEBUG] proc_open done in 3765 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 12:20:17][350616251505557][4664 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-09-06 12:20:17][350616251505557][4664 ms][WARN] Detected error: Process with pid 20261 either refused to load frida-agent, or terminated during injectionProcess with pid 20261 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 12:20:17][350616251505557][4664 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 12:20:17][350616251505557][4929 ms][DEBUG] SU: done in 265 ms; outsystem 5388 4970 12624336 206844 ep_poll 0 S system_server\n [2025-09-06 12:20:17][350616251505557][4929 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 12:20:17][350616251505557][5070 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 12:20:17][350616251505557][5070 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 12:20:17][350616251505557][5070 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 12:20:17][350616251505557][5226 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 12:20:17][350616251505557][5226 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 12:20:17][350616251505557][5384 ms][DEBUG] SU: done in 158 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 12:20:19][350616251505557][7397 ms][DEBUG] START check_boot_completed [2025-09-06 12:20:19][350616251505557][7397 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:20:19][350616251505557][7444 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:20:19][350616251505557][7444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:20:19][350616251505557][7491 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:20:19][350616251505557][7491 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:20:22][350616251505557][10506 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 12:20:22][350616251505557][10506 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251505557\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6515\"}'\'' -e'"" [2025-09-06 12:20:26][350616251505557][13911 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b26327b-ee66-4803-bc34-1819b5b46d87","id":"QR_8b26327b-ee66-4803-bc34-1819b5b46d87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:20:26][350616251505557][14067 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=3343 [2025-09-06 12:20:26][350616251505557][14067 ms][DEBUG] END runCmdUntilRes#2 in 3562 ms [2025-09-06 12:20:26][350616251505557][14068 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:20:28][351642489341143][0 ms][INFO] === Request start === [2025-09-06 12:20:28][351642489341143][1 ms][DEBUG] START check_scloud [2025-09-06 12:20:28][351642489341143][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:20:28][351642489341143][249 ms][DEBUG] SU: done in 249 ms; outu0_a118 21839 4970 23751840 123288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:20:28][351642489341143][250 ms][DEBUG] targetPkg: running [2025-09-06 12:20:28][351642489341143][250 ms][DEBUG] END check_scloud in 249 ms [2025-09-06 12:20:28][351642489341143][250 ms][DEBUG] START check_boot_completed [2025-09-06 12:20:28][351642489341143][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:20:28][351642489341143][295 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 12:20:28][351642489341143][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:20:28][351642489341143][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:20:28][351642489341143][342 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 12:20:28][351642489341143][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:20:28][351642489341143][451 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31219 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1980\nsuccessfulTxPacketsPerSecond: 0.7379121388201347\nretriedTxPackets: 367\nretriedTxPacketsPerSecond: 0.1886143135100793\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1887\nsuccessfulRxPacketsPerSecond: 0.6452594935871133\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:20:28][351642489341143][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:20:29][351642489341143][826 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.450/265.450/265.450/0.000 ms\n [2025-09-06 12:20:29][351642489341143][826 ms][DEBUG] check_internet: online [2025-09-06 12:20:29][351642489341143][826 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:20:29][351642489341143][826 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642489341143\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4561\"}'\'' -e'"" [2025-09-06 12:20:29][351642489341143][826 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:20:29][351642489341143][826 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642489341143\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4561\"}'\'' -e'"" [2025-09-06 12:20:33][351642489341143][4887 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_223824c0-832a-413a-a0e7-813f7636d6ad","id":"QR_223824c0-832a-413a-a0e7-813f7636d6ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:20:33][351642489341143][5044 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-09-06 12:20:33][351642489341143][5044 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-09-06 12:20:33][351642489341143][5044 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:21:04][355362117622006][0 ms][INFO] === Request start === [2025-09-06 12:21:04][355362117622006][1 ms][DEBUG] START check_scloud [2025-09-06 12:21:04][355362117622006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:21:04][355362117622006][343 ms][DEBUG] SU: done in 342 ms; out [2025-09-06 12:21:04][355362117622006][343 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 12:21:04][355362117622006][389 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 12:21:04][355362117622006][389 ms][DEBUG] check_devices: device found [2025-09-06 12:21:04][355362117622006][389 ms][WARN] targetPkg: not running, restarting [2025-09-06 12:21:04][355362117622006][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 12:21:04][355362117622006][717 ms][DEBUG] SU: done in 328 ms; out [2025-09-06 12:21:04][355362117622006][717 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 12:21:05][355362117622006][936 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 12:21:07][355362117622006][2951 ms][DEBUG] END check_scloud in 2950 ms [2025-09-06 12:21:07][355362117622006][2951 ms][DEBUG] START check_boot_completed [2025-09-06 12:21:07][355362117622006][2951 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:21:07][355362117622006][2998 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:21:07][355362117622006][2998 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:21:07][355362117622006][3061 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:21:07][355362117622006][3061 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 12:21:07][355362117622006][3061 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:21:07][355362117622006][3061 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362117622006\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4310\"}'\'' -e'"" [2025-09-06 12:21:07][355362117622006][3061 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:21:07][355362117622006][3061 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362117622006\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4310\"}'\'' -e'"" [2025-09-06 12:21:09][355362117622006][5498 ms][DEBUG] proc_open done in 2437 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-06 12:21:09][355362117622006][5498 ms][DEBUG] END runCmdUntilRes#1 in 2437 ms [2025-09-06 12:21:09][355362117622006][5498 ms][WARN] Detected error: Process not foundProcess not found\r\n [2025-09-06 12:21:09][355362117622006][5498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 12:21:09][355362117622006][5810 ms][DEBUG] SU: done in 312 ms; outsystem 22428 22223 11653316 397696 ep_poll 0 S system_server\n [2025-09-06 12:21:09][355362117622006][5810 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 12:21:10][355362117622006][5966 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 12:21:10][355362117622006][5966 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 12:21:10][355362117622006][5966 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 12:21:10][355362117622006][6091 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 12:21:10][355362117622006][6091 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 12:21:10][355362117622006][6232 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 12:21:12][355362117622006][8247 ms][DEBUG] START check_boot_completed [2025-09-06 12:21:12][355362117622006][8247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:21:12][355362117622006][8294 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:21:12][355362117622006][8294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:21:12][355362117622006][8356 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 12:21:12][355362117622006][8357 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 12:21:15][355362117622006][11371 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 12:21:15][355362117622006][11371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362117622006\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4310\"}'\'' -e'"" [2025-09-06 12:21:19][355362117622006][15511 ms][DEBUG] proc_open done in 4139 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-06 12:21:19][355362117622006][15511 ms][DEBUG] END runCmdUntilRes#2 in 4140 ms [2025-09-06 12:21:19][355362117622006][15511 ms][WARN] Detected error 2; Reboot the device [2025-09-06 12:21:19][355362117622006][15511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 12:21:20][355362117622006][15933 ms][DEBUG] SU: done in 422 ms; outsystem 22428 22223 12626436 626504 ep_poll 0 S system_server\n [2025-09-06 12:21:20][355362117622006][15933 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-06 12:21:21][355362117622006][17495 ms][DEBUG] SU: done in 1562 ms; out [2025-09-06 12:22:03][355362117622006][1 ms][INFO] === Request start === [2025-09-06 12:22:03][355362117622006][1 ms][DEBUG] START check_scloud [2025-09-06 12:22:03][355362117622006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:22:03][355362117622006][41 ms][DEBUG] SU: done in 39 ms; out [2025-09-06 12:22:03][355362117622006][41 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 12:22:03][355362117622006][72 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 12:22:03][355362117622006][72 ms][WARN] check_devices: no device [2025-09-06 12:22:03][355362117622006][72 ms][WARN] check_devices: no device [2025-09-06 12:22:03][355362117622006][72 ms][DEBUG] END check_scloud in 71 ms [2025-09-06 12:23:04][355362117622006][0 ms][INFO] === Request start === [2025-09-06 12:23:04][355362117622006][1 ms][DEBUG] START check_scloud [2025-09-06 12:23:04][355362117622006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:23:04][355362117622006][453 ms][DEBUG] SU: done in 452 ms; out [2025-09-06 12:23:04][355362117622006][453 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 12:23:04][355362117622006][484 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 12:23:04][355362117622006][484 ms][DEBUG] check_devices: device found [2025-09-06 12:23:04][355362117622006][484 ms][WARN] targetPkg: not running, restarting [2025-09-06 12:23:04][355362117622006][484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 12:23:04][355362117622006][640 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 12:23:04][355362117622006][640 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 12:23:05][355362117622006][1249 ms][DEBUG] SU: done in 609 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 12:23:07][355362117622006][3264 ms][DEBUG] END check_scloud in 3264 ms [2025-09-06 12:23:07][355362117622006][3264 ms][DEBUG] START check_boot_completed [2025-09-06 12:23:07][355362117622006][3265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:23:07][355362117622006][3311 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:23:07][355362117622006][3311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:23:07][355362117622006][3405 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 12:23:07][355362117622006][3405 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 12:23:07][355362117622006][3405 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:23:07][355362117622006][3405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362117622006\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3391\"}'\'' -e'"" [2025-09-06 12:23:07][355362117622006][3405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:23:07][355362117622006][3405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362117622006\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3391\"}'\'' -e'"" [2025-09-06 12:23:14][355362117622006][10200 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d3d9fc15-6307-4197-b74b-e286217aacf3","id":"QR_d3d9fc15-6307-4197-b74b-e286217aacf3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:23:14][355362117622006][10356 ms][DEBUG] proc_open done in 6951 ms; code=255; res.len=3343 [2025-09-06 12:23:14][355362117622006][10356 ms][DEBUG] END runCmdUntilRes#1 in 6952 ms [2025-09-06 12:23:14][355362117622006][10357 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:23:16][355362117622006][0 ms][INFO] === Request start === [2025-09-06 12:23:16][355362117622006][1 ms][DEBUG] START check_scloud [2025-09-06 12:23:16][355362117622006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:23:17][355362117622006][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 11660 5018 23876800 108548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:23:17][355362117622006][321 ms][DEBUG] targetPkg: running [2025-09-06 12:23:17][355362117622006][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-06 12:23:17][355362117622006][321 ms][DEBUG] START check_boot_completed [2025-09-06 12:23:17][355362117622006][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:23:17][355362117622006][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:23:17][355362117622006][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:23:17][355362117622006][430 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:23:17][355362117622006][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:23:17][355362117622006][430 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:23:17][355362117622006][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362117622006\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1662\"}'\'' -e'"" [2025-09-06 12:23:17][355362117622006][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:23:17][355362117622006][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362117622006\",\"model\":\"SM-G985F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1662\"}'\'' -e'"" [2025-09-06 12:23:23][355362117622006][6726 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f134c2ab-c9fa-49b9-85b5-875e6592d59b","id":"QR_f134c2ab-c9fa-49b9-85b5-875e6592d59b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:23:23][355362117622006][6882 ms][DEBUG] proc_open done in 6451 ms; code=255; res.len=3343 [2025-09-06 12:23:23][355362117622006][6882 ms][DEBUG] END runCmdUntilRes#1 in 6452 ms [2025-09-06 12:23:23][355362117622006][6882 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:26:03][352990188687814][1 ms][INFO] === Request start === [2025-09-06 12:26:03][352990188687814][1 ms][DEBUG] START check_scloud [2025-09-06 12:26:03][352990188687814][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:26:04][352990188687814][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 11660 5018 23928848 78340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:26:04][352990188687814][290 ms][DEBUG] targetPkg: running [2025-09-06 12:26:04][352990188687814][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-06 12:26:04][352990188687814][290 ms][DEBUG] START check_boot_completed [2025-09-06 12:26:04][352990188687814][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:26:04][352990188687814][320 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 12:26:04][352990188687814][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:26:04][352990188687814][382 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 12:26:04][352990188687814][382 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:26:04][352990188687814][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:26:04][352990188687814][507 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31134 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 868\nsuccessfulTxPacketsPerSecond: 5.7645057846020915\nretriedTxPackets: 131\nretriedTxPacketsPerSecond: 1.234589972151553\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 971\nsuccessfulRxPacketsPerSecond: 5.507161066276437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:26:04][352990188687814][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:26:06][352990188687814][2335 ms][DEBUG] SU: done in 1828 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.464/303.464/303.464/0.000 ms\n [2025-09-06 12:26:06][352990188687814][2335 ms][DEBUG] check_internet: online [2025-09-06 12:26:06][352990188687814][2335 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:26:06][352990188687814][2335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990188687814\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2045\"}'\'' -e'"" [2025-09-06 12:26:06][352990188687814][2336 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:26:06][352990188687814][2336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990188687814\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2045\"}'\'' -e'"" [2025-09-06 12:26:10][352990188687814][7068 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0bd2de70-c09d-4a90-bac1-82a1759ba4c9","id":"QR_0bd2de70-c09d-4a90-bac1-82a1759ba4c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:26:11][352990188687814][7224 ms][DEBUG] proc_open done in 4888 ms; code=255; res.len=3343 [2025-09-06 12:26:11][352990188687814][7224 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 12:26:11][352990188687814][7224 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:26:13][352990188687814][0 ms][INFO] === Request start === [2025-09-06 12:26:13][352990188687814][1 ms][DEBUG] START check_scloud [2025-09-06 12:26:13][352990188687814][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:26:13][352990188687814][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 11660 5018 24059160 90044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:26:13][352990188687814][337 ms][DEBUG] targetPkg: running [2025-09-06 12:26:13][352990188687814][337 ms][DEBUG] END check_scloud in 337 ms [2025-09-06 12:26:13][352990188687814][337 ms][DEBUG] START check_boot_completed [2025-09-06 12:26:13][352990188687814][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:26:13][352990188687814][384 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:26:13][352990188687814][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:26:13][352990188687814][431 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:26:13][352990188687814][431 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:26:13][352990188687814][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:26:14][352990188687814][541 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31134 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 868\nsuccessfulTxPacketsPerSecond: 5.7645057846020915\nretriedTxPackets: 131\nretriedTxPacketsPerSecond: 1.234589972151553\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 971\nsuccessfulRxPacketsPerSecond: 5.507161066276437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:26:14][352990188687814][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:26:14][352990188687814][931 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=278 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 278.397/278.397/278.397/0.000 ms\n [2025-09-06 12:26:14][352990188687814][931 ms][DEBUG] check_internet: online [2025-09-06 12:26:14][352990188687814][931 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:26:14][352990188687814][931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990188687814\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8342\"}'\'' -e'"" [2025-09-06 12:26:14][352990188687814][931 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:26:14][352990188687814][931 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990188687814\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8342\"}'\'' -e'"" [2025-09-06 12:26:19][352990188687814][6086 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5178eab5-ea52-424f-9b7e-25f1b97a82ed","id":"QR_5178eab5-ea52-424f-9b7e-25f1b97a82ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:26:19][352990188687814][6242 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-06 12:26:19][352990188687814][6242 ms][DEBUG] END runCmdUntilRes#1 in 5310 ms [2025-09-06 12:26:19][352990188687814][6242 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:26:23][350616251166384][0 ms][INFO] === Request start === [2025-09-06 12:26:23][350616251166384][1 ms][DEBUG] START check_scloud [2025-09-06 12:26:23][350616251166384][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:26:24][350616251166384][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 11660 5018 24189344 106244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:26:24][350616251166384][321 ms][DEBUG] targetPkg: running [2025-09-06 12:26:24][350616251166384][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 12:26:24][350616251166384][321 ms][DEBUG] START check_boot_completed [2025-09-06 12:26:24][350616251166384][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:26:24][350616251166384][366 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 12:26:24][350616251166384][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:26:24][350616251166384][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:26:24][350616251166384][413 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 12:26:24][350616251166384][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:26:24][350616251166384][538 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31134 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 868\nsuccessfulTxPacketsPerSecond: 5.7645057846020915\nretriedTxPackets: 131\nretriedTxPacketsPerSecond: 1.234589972151553\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 971\nsuccessfulRxPacketsPerSecond: 5.507161066276437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:26:24][350616251166384][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:26:24][350616251166384][913 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.983/267.983/267.983/0.000 ms\n [2025-09-06 12:26:24][350616251166384][913 ms][DEBUG] check_internet: online [2025-09-06 12:26:24][350616251166384][913 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:26:24][350616251166384][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251166384\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6333\"}'\'' -e'"" [2025-09-06 12:26:24][350616251166384][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:26:24][350616251166384][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251166384\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6333\"}'\'' -e'"" [2025-09-06 12:26:28][350616251166384][4240 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4028ab0-c755-46cc-ad07-7020dd249ec6","id":"QR_c4028ab0-c755-46cc-ad07-7020dd249ec6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:26:28][350616251166384][4396 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-06 12:26:28][350616251166384][4396 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-06 12:26:28][350616251166384][4397 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:26:30][350616251166384][0 ms][INFO] === Request start === [2025-09-06 12:26:30][350616251166384][1 ms][DEBUG] START check_scloud [2025-09-06 12:26:30][350616251166384][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:26:30][350616251166384][335 ms][DEBUG] SU: done in 335 ms; outu0_a118 11660 5018 24331908 118864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:26:30][350616251166384][335 ms][DEBUG] targetPkg: running [2025-09-06 12:26:30][350616251166384][335 ms][DEBUG] END check_scloud in 335 ms [2025-09-06 12:26:30][350616251166384][336 ms][DEBUG] START check_boot_completed [2025-09-06 12:26:30][350616251166384][336 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:26:31][350616251166384][382 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:26:31][350616251166384][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:26:31][350616251166384][445 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:26:31][350616251166384][445 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:26:31][350616251166384][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:26:31][350616251166384][601 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31134 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 868\nsuccessfulTxPacketsPerSecond: 5.7645057846020915\nretriedTxPackets: 131\nretriedTxPacketsPerSecond: 1.234589972151553\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 971\nsuccessfulRxPacketsPerSecond: 5.507161066276437\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:26:31][350616251166384][601 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:26:31][350616251166384][976 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.637/251.637/251.637/0.000 ms\n [2025-09-06 12:26:31][350616251166384][976 ms][DEBUG] check_internet: online [2025-09-06 12:26:31][350616251166384][976 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:26:31][350616251166384][976 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251166384\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3959\"}'\'' -e'"" [2025-09-06 12:26:31][350616251166384][976 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:26:31][350616251166384][976 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616251166384\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3959\"}'\'' -e'"" [2025-09-06 12:26:36][350616251166384][5928 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_75e7e080-305f-409b-8868-dbd01b8af935","id":"QR_75e7e080-305f-409b-8868-dbd01b8af935","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:26:36][350616251166384][6084 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 12:26:36][350616251166384][6084 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 12:26:36][350616251166384][6084 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:28:03][350396205977489][1 ms][INFO] === Request start === [2025-09-06 12:28:03][350396205977489][1 ms][DEBUG] START check_scloud [2025-09-06 12:28:03][350396205977489][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:28:03][350396205977489][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 11660 5018 24460064 128312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:28:03][350396205977489][279 ms][DEBUG] targetPkg: running [2025-09-06 12:28:03][350396205977489][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-06 12:28:03][350396205977489][279 ms][DEBUG] START check_boot_completed [2025-09-06 12:28:03][350396205977489][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:28:04][350396205977489][310 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:28:04][350396205977489][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:28:04][350396205977489][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:28:04][350396205977489][357 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 12:28:04][350396205977489][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:28:04][350396205977489][466 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31134 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1215\nsuccessfulTxPacketsPerSecond: 1.3936806422980066\nretriedTxPackets: 197\nretriedTxPacketsPerSecond: 0.2650804679875171\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1288\nsuccessfulRxPacketsPerSecond: 1.2731895204854988\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:28:04][350396205977489][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:28:04][350396205977489][904 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=345 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 345.255/345.255/345.255/0.000 ms\n [2025-09-06 12:28:04][350396205977489][904 ms][DEBUG] check_internet: online [2025-09-06 12:28:04][350396205977489][904 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:28:04][350396205977489][904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350396205977489\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6400\"}'\'' -e'"" [2025-09-06 12:28:04][350396205977489][904 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:28:04][350396205977489][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350396205977489\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6400\"}'\'' -e'"" [2025-09-06 12:28:09][350396205977489][5356 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48e803ff-0a5b-45e0-aed6-901fbf354292","id":"QR_48e803ff-0a5b-45e0-aed6-901fbf354292","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:28:09][350396205977489][5512 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-06 12:28:09][350396205977489][5512 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-06 12:28:09][350396205977489][5512 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:28:11][350396205977489][0 ms][INFO] === Request start === [2025-09-06 12:28:11][350396205977489][1 ms][DEBUG] START check_scloud [2025-09-06 12:28:11][350396205977489][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:28:11][350396205977489][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 11660 5018 24599712 134308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:28:11][350396205977489][315 ms][DEBUG] targetPkg: running [2025-09-06 12:28:11][350396205977489][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 12:28:11][350396205977489][316 ms][DEBUG] START check_boot_completed [2025-09-06 12:28:11][350396205977489][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:28:11][350396205977489][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:28:11][350396205977489][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:28:11][350396205977489][425 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 12:28:11][350396205977489][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:28:11][350396205977489][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:28:12][350396205977489][535 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31134 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1215\nsuccessfulTxPacketsPerSecond: 1.3936806422980066\nretriedTxPackets: 197\nretriedTxPacketsPerSecond: 0.2650804679875171\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1288\nsuccessfulRxPacketsPerSecond: 1.2731895204854988\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:28:12][350396205977489][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:28:12][350396205977489][940 ms][DEBUG] SU: done in 405 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=296 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 296.815/296.815/296.815/0.000 ms\n [2025-09-06 12:28:12][350396205977489][940 ms][DEBUG] check_internet: online [2025-09-06 12:28:12][350396205977489][940 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:28:12][350396205977489][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350396205977489\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2940\"}'\'' -e'"" [2025-09-06 12:28:12][350396205977489][941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:28:12][350396205977489][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350396205977489\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2940\"}'\'' -e'"" [2025-09-06 12:28:17][350396205977489][6189 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_090c95be-abad-44f1-967c-700c01e3c60d","id":"QR_090c95be-abad-44f1-967c-700c01e3c60d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:28:17][350396205977489][6345 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-06 12:28:17][350396205977489][6345 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-06 12:28:17][350396205977489][6345 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:39:04][350545461769259][1 ms][INFO] === Request start === [2025-09-06 12:39:04][350545461769259][1 ms][DEBUG] START check_scloud [2025-09-06 12:39:04][350545461769259][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:39:05][350545461769259][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11660 5018 24720532 146916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:39:05][350545461769259][313 ms][DEBUG] targetPkg: running [2025-09-06 12:39:05][350545461769259][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 12:39:05][350545461769259][313 ms][DEBUG] START check_boot_completed [2025-09-06 12:39:05][350545461769259][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:39:05][350545461769259][344 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:39:05][350545461769259][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:39:05][350545461769259][393 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 12:39:05][350545461769259][393 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-06 12:39:05][350545461769259][393 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:39:05][350545461769259][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461769259\",\"model\":\"SM-X210\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TXB0PFK9Y\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9868\"}'\'' -e'"" [2025-09-06 12:39:05][350545461769259][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:39:05][350545461769259][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461769259\",\"model\":\"SM-X210\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TXB0PFK9Y\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9868\"}'\'' -e'"" [2025-09-06 12:39:10][350545461769259][5234 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7bd2586b-a2f1-4748-8005-0a97948a100b","id":"QR_7bd2586b-a2f1-4748-8005-0a97948a100b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:39:10][350545461769259][5390 ms][DEBUG] proc_open done in 4997 ms; code=255; res.len=3343 [2025-09-06 12:39:10][350545461769259][5390 ms][DEBUG] END runCmdUntilRes#1 in 4997 ms [2025-09-06 12:39:10][350545461769259][5390 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:40:03][350753204427454][0 ms][INFO] === Request start === [2025-09-06 12:40:03][350753204427454][1 ms][DEBUG] START check_scloud [2025-09-06 12:40:03][350753204427454][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:40:04][350753204427454][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 11660 5018 24890820 145716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:40:04][350753204427454][267 ms][DEBUG] targetPkg: running [2025-09-06 12:40:04][350753204427454][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-06 12:40:04][350753204427454][267 ms][DEBUG] START check_boot_completed [2025-09-06 12:40:04][350753204427454][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:40:04][350753204427454][313 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:40:04][350753204427454][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:40:04][350753204427454][360 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:40:04][350753204427454][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:40:04][350753204427454][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:40:04][350753204427454][470 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31134 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1381\nsuccessfulTxPacketsPerSecond: 0.2634168261371472\nretriedTxPackets: 259\nretriedTxPacketsPerSecond: 0.08522309080907703\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1424\nsuccessfulRxPacketsPerSecond: 0.23242661129748282\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:40:04][350753204427454][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:40:04][350753204427454][1172 ms][DEBUG] SU: done in 702 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.032/303.032/303.032/0.000 ms\n [2025-09-06 12:40:04][350753204427454][1172 ms][DEBUG] check_internet: online [2025-09-06 12:40:04][350753204427454][1172 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:40:04][350753204427454][1172 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753204427454\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7435\"}'\'' -e'"" [2025-09-06 12:40:04][350753204427454][1172 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:40:04][350753204427454][1172 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753204427454\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7435\"}'\'' -e'"" [2025-09-06 12:40:09][350753204427454][5218 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e264d433-9b98-486d-8a3c-42f5fe972130","id":"QR_e264d433-9b98-486d-8a3c-42f5fe972130","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:40:09][350753204427454][5374 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-09-06 12:40:09][350753204427454][5374 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-06 12:40:09][350753204427454][5375 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:40:11][350753204427454][0 ms][INFO] === Request start === [2025-09-06 12:40:11][350753204427454][1 ms][DEBUG] START check_scloud [2025-09-06 12:40:11][350753204427454][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:40:11][350753204427454][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 11660 5018 25033420 143652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:40:11][350753204427454][259 ms][DEBUG] targetPkg: running [2025-09-06 12:40:11][350753204427454][259 ms][DEBUG] END check_scloud in 259 ms [2025-09-06 12:40:11][350753204427454][259 ms][DEBUG] START check_boot_completed [2025-09-06 12:40:11][350753204427454][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:40:11][350753204427454][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:40:11][350753204427454][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:40:11][350753204427454][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:40:11][350753204427454][338 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 12:40:11][350753204427454][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:40:11][350753204427454][447 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31134 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1381\nsuccessfulTxPacketsPerSecond: 0.2634168261371472\nretriedTxPackets: 259\nretriedTxPacketsPerSecond: 0.08522309080907703\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1424\nsuccessfulRxPacketsPerSecond: 0.23242661129748282\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:40:11][350753204427454][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:40:12][350753204427454][821 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=278 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 278.753/278.753/278.753/0.000 ms\n [2025-09-06 12:40:12][350753204427454][821 ms][DEBUG] check_internet: online [2025-09-06 12:40:12][350753204427454][821 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:40:12][350753204427454][821 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753204427454\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4896\"}'\'' -e'"" [2025-09-06 12:40:12][350753204427454][821 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:40:12][350753204427454][821 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753204427454\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4896\"}'\'' -e'"" [2025-09-06 12:40:17][350753204427454][6195 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2083b6b-cc30-415b-bf92-5efeffed1227","id":"QR_c2083b6b-cc30-415b-bf92-5efeffed1227","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:40:17][350753204427454][6351 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-06 12:40:17][350753204427454][6351 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-06 12:40:17][350753204427454][6352 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:41:03][353725741363936][0 ms][INFO] === Request start === [2025-09-06 12:41:03][353725741363936][1 ms][DEBUG] START check_scloud [2025-09-06 12:41:03][353725741363936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:41:03][353725741363936][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 11660 5018 25173708 144744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:41:03][353725741363936][331 ms][DEBUG] targetPkg: running [2025-09-06 12:41:03][353725741363936][331 ms][DEBUG] END check_scloud in 331 ms [2025-09-06 12:41:03][353725741363936][332 ms][DEBUG] START check_boot_completed [2025-09-06 12:41:03][353725741363936][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:41:04][353725741363936][378 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:41:04][353725741363936][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:41:04][353725741363936][441 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:41:04][353725741363936][441 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:41:04][353725741363936][441 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:41:04][353725741363936][441 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725741363936\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4142\"}'\'' -e'"" [2025-09-06 12:41:04][353725741363936][441 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:41:04][353725741363936][441 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725741363936\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4142\"}'\'' -e'"" [2025-09-06 12:41:12][353725741363936][9095 ms][DEBUG] proc_open done in 8654 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 12:41:12][353725741363936][9095 ms][DEBUG] END runCmdUntilRes#1 in 8654 ms [2025-09-06 12:41:12][353725741363936][9095 ms][WARN] Detected error: Process with pid 11660 either refused to load frida-agent, or terminated during injectionProcess with pid 11660 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 12:41:12][353725741363936][9095 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 12:41:13][353725741363936][9424 ms][DEBUG] SU: done in 329 ms; out [2025-09-06 12:41:13][353725741363936][9424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 12:41:13][353725741363936][9579 ms][DEBUG] SU: done in 155 ms; out [2025-09-06 12:41:13][353725741363936][9579 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 12:41:13][353725741363936][9579 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 12:41:13][353725741363936][9845 ms][DEBUG] SU: done in 265 ms; out [2025-09-06 12:41:13][353725741363936][9845 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 12:41:13][353725741363936][10235 ms][DEBUG] SU: done in 390 ms; out [2025-09-06 12:41:15][353725741363936][12250 ms][DEBUG] START check_boot_completed [2025-09-06 12:41:15][353725741363936][12250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:41:15][353725741363936][12297 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:41:15][353725741363936][12297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:41:15][353725741363936][12344 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:41:15][353725741363936][12344 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:41:19][353725741363936][15359 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 12:41:19][353725741363936][15359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725741363936\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4142\"}'\'' -e'"" [2025-09-06 12:41:20][353725741363936][16906 ms][DEBUG] proc_open done in 1547 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-06 12:41:20][353725741363936][16906 ms][DEBUG] END runCmdUntilRes#2 in 1547 ms [2025-09-06 12:41:20][353725741363936][16906 ms][WARN] Detected error 2; Reboot the device [2025-09-06 12:41:20][353725741363936][16906 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 12:41:20][353725741363936][17171 ms][DEBUG] SU: done in 265 ms; outsystem 18857 18529 7716180 137884 0 0 R system_server\n [2025-09-06 12:41:20][353725741363936][17171 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-06 12:41:21][353725741363936][17811 ms][DEBUG] SU: done in 640 ms; out [2025-09-06 12:42:03][353725741363936][1 ms][INFO] === Request start === [2025-09-06 12:42:03][353725741363936][1 ms][DEBUG] START check_scloud [2025-09-06 12:42:03][353725741363936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:42:03][353725741363936][36 ms][DEBUG] SU: done in 35 ms; out [2025-09-06 12:42:03][353725741363936][36 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 12:42:03][353725741363936][67 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 12:42:03][353725741363936][67 ms][WARN] check_devices: no device [2025-09-06 12:42:03][353725741363936][67 ms][WARN] check_devices: no device [2025-09-06 12:42:03][353725741363936][67 ms][DEBUG] END check_scloud in 66 ms [2025-09-06 12:42:08][350756482796839][0 ms][INFO] === Request start === [2025-09-06 12:42:08][350756482796839][1 ms][DEBUG] START check_scloud [2025-09-06 12:42:08][350756482796839][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:42:08][350756482796839][34 ms][DEBUG] SU: done in 33 ms; out [2025-09-06 12:42:08][350756482796839][34 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 12:42:08][350756482796839][65 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 12:42:08][350756482796839][65 ms][WARN] check_devices: no device [2025-09-06 12:42:08][350756482796839][65 ms][WARN] check_devices: no device [2025-09-06 12:42:08][350756482796839][65 ms][DEBUG] END check_scloud in 64 ms [2025-09-06 12:42:11][352501911200351][0 ms][INFO] === Request start === [2025-09-06 12:42:11][352501911200351][1 ms][DEBUG] START check_scloud [2025-09-06 12:42:11][352501911200351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:42:11][352501911200351][46 ms][DEBUG] SU: done in 45 ms; out [2025-09-06 12:42:11][352501911200351][46 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 12:42:12][352501911200351][93 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\n\n [2025-09-06 12:42:12][352501911200351][93 ms][WARN] check_devices: no device [2025-09-06 12:42:12][352501911200351][93 ms][WARN] check_devices: no device [2025-09-06 12:42:12][352501911200351][93 ms][DEBUG] END check_scloud in 92 ms [2025-09-06 12:43:03][353725741363936][0 ms][INFO] === Request start === [2025-09-06 12:43:03][353725741363936][1 ms][DEBUG] START check_scloud [2025-09-06 12:43:03][353725741363936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:43:04][353725741363936][393 ms][DEBUG] SU: done in 392 ms; out [2025-09-06 12:43:04][353725741363936][393 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 12:43:04][353725741363936][440 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 12:43:04][353725741363936][440 ms][DEBUG] check_devices: device found [2025-09-06 12:43:04][353725741363936][440 ms][WARN] targetPkg: not running, restarting [2025-09-06 12:43:04][353725741363936][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 12:43:04][353725741363936][596 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 12:43:04][353725741363936][596 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 12:43:04][353725741363936][910 ms][DEBUG] SU: done in 313 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 12:43:06][353725741363936][2924 ms][DEBUG] END check_scloud in 2923 ms [2025-09-06 12:43:06][353725741363936][2924 ms][DEBUG] START check_boot_completed [2025-09-06 12:43:06][353725741363936][2924 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:43:06][353725741363936][2971 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:43:06][353725741363936][2971 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:43:06][353725741363936][3049 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 12:43:06][353725741363936][3049 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 12:43:06][353725741363936][3049 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:43:06][353725741363936][3049 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725741363936\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5274\"}'\'' -e'"" [2025-09-06 12:43:06][353725741363936][3049 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:43:06][353725741363936][3049 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725741363936\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5274\"}'\'' -e'"" [2025-09-06 12:43:13][353725741363936][10203 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_057bb8aa-8fa1-4317-95ac-e9f7f310b7d3","id":"QR_057bb8aa-8fa1-4317-95ac-e9f7f310b7d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:43:14][353725741363936][10359 ms][DEBUG] proc_open done in 7310 ms; code=255; res.len=3343 [2025-09-06 12:43:14][353725741363936][10359 ms][DEBUG] END runCmdUntilRes#1 in 7310 ms [2025-09-06 12:43:14][353725741363936][10360 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:43:16][353725741363936][0 ms][INFO] === Request start === [2025-09-06 12:43:16][353725741363936][1 ms][DEBUG] START check_scloud [2025-09-06 12:43:16][353725741363936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:43:16][353725741363936][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 11521 4926 23516608 115740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:43:16][353725741363936][327 ms][DEBUG] targetPkg: running [2025-09-06 12:43:16][353725741363936][327 ms][DEBUG] END check_scloud in 327 ms [2025-09-06 12:43:16][353725741363936][327 ms][DEBUG] START check_boot_completed [2025-09-06 12:43:16][353725741363936][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:43:16][353725741363936][374 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:43:16][353725741363936][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:43:16][353725741363936][436 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:43:16][353725741363936][436 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:43:16][353725741363936][436 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:43:16][353725741363936][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725741363936\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7213\"}'\'' -e'"" [2025-09-06 12:43:16][353725741363936][436 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:43:16][353725741363936][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725741363936\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7213\"}'\'' -e'"" [2025-09-06 12:43:22][353725741363936][6013 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf8100d2-203d-43b3-817a-33622651d4cd","id":"QR_cf8100d2-203d-43b3-817a-33622651d4cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:43:22][353725741363936][6169 ms][DEBUG] proc_open done in 5733 ms; code=255; res.len=3343 [2025-09-06 12:43:22][353725741363936][6169 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-09-06 12:43:22][353725741363936][6169 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:43:27][350756482796839][0 ms][INFO] === Request start === [2025-09-06 12:43:27][350756482796839][1 ms][DEBUG] START check_scloud [2025-09-06 12:43:27][350756482796839][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:43:28][350756482796839][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 11521 4926 23709400 112236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:43:28][350756482796839][318 ms][DEBUG] targetPkg: running [2025-09-06 12:43:28][350756482796839][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 12:43:28][350756482796839][319 ms][DEBUG] START check_boot_completed [2025-09-06 12:43:28][350756482796839][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:43:28][350756482796839][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:43:28][350756482796839][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:43:28][350756482796839][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:43:28][350756482796839][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:43:28][350756482796839][412 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:43:28][350756482796839][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756482796839\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8558\"}'\'' -e'"" [2025-09-06 12:43:28][350756482796839][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:43:28][350756482796839][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756482796839\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8558\"}'\'' -e'"" [2025-09-06 12:43:31][350756482796839][3849 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-06 12:43:31][350756482796839][4005 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=107 [2025-09-06 12:43:31][350756482796839][4005 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-09-06 12:43:31][350756482796839][4005 ms][INFO] SUCCESS response from frida (len=107) [2025-09-06 12:43:32][][0 ms][INFO] === Request start === [2025-09-06 12:43:32][][1 ms][DEBUG] START check_scloud [2025-09-06 12:43:32][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:43:32][][434 ms][DEBUG] SU: done in 433 ms; outu0_a118 11521 4926 23858940 109524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:43:32][][434 ms][DEBUG] targetPkg: running [2025-09-06 12:43:32][][434 ms][DEBUG] END check_scloud in 434 ms [2025-09-06 12:43:32][][434 ms][DEBUG] START check_boot_completed [2025-09-06 12:43:32][][434 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:43:32][][481 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:43:32][][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:43:32][][543 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:43:32][][543 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:43:32][][543 ms][DEBUG] rawBody.length=1131 [2025-09-06 12:43:32][][543 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW50QR3EA\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8759\"}'\'' -e'"" [2025-09-06 12:43:32][][543 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:43:32][][543 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW50QR3EA\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8759\"}'\'' -e'"" [2025-09-06 12:43:36][][4652 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-09-06 12:43:37][][4808 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=107 [2025-09-06 12:43:37][][4808 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-09-06 12:43:37][][4808 ms][INFO] SUCCESS response from frida (len=107) [2025-09-06 12:43:38][350756482796839][0 ms][INFO] === Request start === [2025-09-06 12:43:38][350756482796839][1 ms][DEBUG] START check_scloud [2025-09-06 12:43:38][350756482796839][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:43:39][350756482796839][365 ms][DEBUG] SU: done in 364 ms; outu0_a118 11521 4926 23923588 103428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:43:39][350756482796839][365 ms][DEBUG] targetPkg: running [2025-09-06 12:43:39][350756482796839][365 ms][DEBUG] END check_scloud in 364 ms [2025-09-06 12:43:39][350756482796839][365 ms][DEBUG] START check_boot_completed [2025-09-06 12:43:39][350756482796839][365 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:43:39][350756482796839][412 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:43:39][350756482796839][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:43:39][350756482796839][474 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:43:39][350756482796839][474 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:43:39][350756482796839][474 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:43:39][350756482796839][474 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756482796839\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5614\"}'\'' -e'"" [2025-09-06 12:43:39][350756482796839][474 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:43:39][350756482796839][474 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756482796839\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5614\"}'\'' -e'"" [2025-09-06 12:43:44][350756482796839][5785 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bdabfcd4-c41b-407f-b62b-6d54fbef3f1f","id":"QR_bdabfcd4-c41b-407f-b62b-6d54fbef3f1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:43:44][350756482796839][5941 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-09-06 12:43:44][350756482796839][5941 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-09-06 12:43:44][350756482796839][5941 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:44:03][352501911200351][0 ms][INFO] === Request start === [2025-09-06 12:44:03][352501911200351][1 ms][DEBUG] START check_scloud [2025-09-06 12:44:03][352501911200351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:44:03][352501911200351][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 11521 4926 24000544 99540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:44:03][352501911200351][338 ms][DEBUG] targetPkg: running [2025-09-06 12:44:03][352501911200351][338 ms][DEBUG] END check_scloud in 338 ms [2025-09-06 12:44:03][352501911200351][338 ms][DEBUG] START check_boot_completed [2025-09-06 12:44:03][352501911200351][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:44:03][352501911200351][385 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:44:03][352501911200351][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:44:03][352501911200351][432 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:44:03][352501911200351][432 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:44:03][352501911200351][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:44:04][352501911200351][572 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 792\nsuccessfulTxPacketsPerSecond: 7.351005070451782\nretriedTxPackets: 92\nretriedTxPacketsPerSecond: 1.7045185347479856\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 808\nsuccessfulRxPacketsPerSecond: 7.447940482097996\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:44:04][352501911200351][573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:44:05][352501911200351][2416 ms][DEBUG] SU: done in 1843 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.619/301.619/301.619/0.000 ms\n [2025-09-06 12:44:05][352501911200351][2416 ms][DEBUG] check_internet: online [2025-09-06 12:44:05][352501911200351][2416 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:44:05][352501911200351][2416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501911200351\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2900\"}'\'' -e'"" [2025-09-06 12:44:05][352501911200351][2416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:44:05][352501911200351][2416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501911200351\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2900\"}'\'' -e'"" [2025-09-06 12:44:09][352501911200351][5805 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5331c0ec-49eb-42be-94f6-ca58ee6962d2","id":"QR_5331c0ec-49eb-42be-94f6-ca58ee6962d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:44:09][352501911200351][5962 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=3343 [2025-09-06 12:44:09][352501911200351][5962 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-09-06 12:44:09][352501911200351][5962 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:44:11][352501911200351][1 ms][INFO] === Request start === [2025-09-06 12:44:11][352501911200351][1 ms][DEBUG] START check_scloud [2025-09-06 12:44:11][352501911200351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:44:12][352501911200351][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 11521 4926 24161384 107024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:44:12][352501911200351][280 ms][DEBUG] targetPkg: running [2025-09-06 12:44:12][352501911200351][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-06 12:44:12][352501911200351][280 ms][DEBUG] START check_boot_completed [2025-09-06 12:44:12][352501911200351][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:44:12][352501911200351][327 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:44:12][352501911200351][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:44:12][352501911200351][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:44:12][352501911200351][374 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:44:12][352501911200351][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:44:12][352501911200351][483 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 792\nsuccessfulTxPacketsPerSecond: 7.351005070451782\nretriedTxPackets: 92\nretriedTxPacketsPerSecond: 1.7045185347479856\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 808\nsuccessfulRxPacketsPerSecond: 7.447940482097996\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:44:12][352501911200351][483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:44:12][352501911200351][874 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=270 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 270.554/270.554/270.554/0.000 ms\n [2025-09-06 12:44:12][352501911200351][874 ms][DEBUG] check_internet: online [2025-09-06 12:44:12][352501911200351][874 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:44:12][352501911200351][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501911200351\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3293\"}'\'' -e'"" [2025-09-06 12:44:12][352501911200351][874 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:44:12][352501911200351][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501911200351\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3293\"}'\'' -e'"" [2025-09-06 12:44:17][352501911200351][5607 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21390402-de79-493d-ba3f-520d9a75afa5","id":"QR_21390402-de79-493d-ba3f-520d9a75afa5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:44:17][352501911200351][5763 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 12:44:17][352501911200351][5763 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 12:44:17][352501911200351][5763 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:44:21][358689980236697][0 ms][INFO] === Request start === [2025-09-06 12:44:21][358689980236697][1 ms][DEBUG] START check_scloud [2025-09-06 12:44:21][358689980236697][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:44:22][358689980236697][278 ms][DEBUG] SU: done in 278 ms; outu0_a118 11521 4926 24318000 115248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:44:22][358689980236697][278 ms][DEBUG] targetPkg: running [2025-09-06 12:44:22][358689980236697][278 ms][DEBUG] END check_scloud in 278 ms [2025-09-06 12:44:22][358689980236697][278 ms][DEBUG] START check_boot_completed [2025-09-06 12:44:22][358689980236697][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:44:22][358689980236697][310 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:44:22][358689980236697][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:44:22][358689980236697][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:44:22][358689980236697][357 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 12:44:22][358689980236697][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:44:22][358689980236697][482 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 792\nsuccessfulTxPacketsPerSecond: 7.351005070451782\nretriedTxPackets: 92\nretriedTxPacketsPerSecond: 1.7045185347479856\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 808\nsuccessfulRxPacketsPerSecond: 7.447940482097996\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:44:22][358689980236697][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:44:22][358689980236697][872 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.553/286.553/286.553/0.000 ms\n [2025-09-06 12:44:22][358689980236697][872 ms][DEBUG] check_internet: online [2025-09-06 12:44:22][358689980236697][872 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:44:22][358689980236697][872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358689980236697\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9615\"}'\'' -e'"" [2025-09-06 12:44:22][358689980236697][872 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:44:22][358689980236697][872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358689980236697\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9615\"}'\'' -e'"" [2025-09-06 12:44:26][358689980236697][4715 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a70f6425-1dc1-44e2-bba5-7128f9f1e1a6","id":"QR_a70f6425-1dc1-44e2-bba5-7128f9f1e1a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:44:26][358689980236697][4871 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-06 12:44:26][358689980236697][4871 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-06 12:44:26][358689980236697][4871 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:44:29][358689980236697][0 ms][INFO] === Request start === [2025-09-06 12:44:29][358689980236697][1 ms][DEBUG] START check_scloud [2025-09-06 12:44:29][358689980236697][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:44:29][358689980236697][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 11521 4926 24442132 123928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:44:29][358689980236697][332 ms][DEBUG] targetPkg: running [2025-09-06 12:44:29][358689980236697][332 ms][DEBUG] END check_scloud in 331 ms [2025-09-06 12:44:29][358689980236697][332 ms][DEBUG] START check_boot_completed [2025-09-06 12:44:29][358689980236697][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:44:29][358689980236697][378 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:44:29][358689980236697][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:44:29][358689980236697][441 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:44:29][358689980236697][441 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:44:29][358689980236697][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:44:29][358689980236697][566 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 792\nsuccessfulTxPacketsPerSecond: 7.351005070451782\nretriedTxPackets: 92\nretriedTxPacketsPerSecond: 1.7045185347479856\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 808\nsuccessfulRxPacketsPerSecond: 7.447940482097996\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:44:29][358689980236697][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:44:29][358689980236697][941 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.231/248.231/248.231/0.000 ms\n [2025-09-06 12:44:29][358689980236697][941 ms][DEBUG] check_internet: online [2025-09-06 12:44:29][358689980236697][941 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:44:29][358689980236697][941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358689980236697\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5577\"}'\'' -e'"" [2025-09-06 12:44:29][358689980236697][941 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:44:29][358689980236697][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358689980236697\",\"model\":\"SM-F946B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5577\"}'\'' -e'"" [2025-09-06 12:44:35][358689980236697][6002 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d72fa5e-87e4-4881-ace4-2f664d79048e","id":"QR_9d72fa5e-87e4-4881-ace4-2f664d79048e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:44:35][358689980236697][6158 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 12:44:35][358689980236697][6158 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 12:44:35][358689980236697][6158 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:45:04][353987960101708][0 ms][INFO] === Request start === [2025-09-06 12:45:04][353987960101708][1 ms][DEBUG] START check_scloud [2025-09-06 12:45:04][353987960101708][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:45:05][353987960101708][334 ms][DEBUG] SU: done in 333 ms; outu0_a118 11521 4926 24559536 135276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:45:05][353987960101708][334 ms][DEBUG] targetPkg: running [2025-09-06 12:45:05][353987960101708][334 ms][DEBUG] END check_scloud in 334 ms [2025-09-06 12:45:05][353987960101708][334 ms][DEBUG] START check_boot_completed [2025-09-06 12:45:05][353987960101708][335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:45:05][353987960101708][381 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:45:05][353987960101708][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:45:05][353987960101708][428 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:45:05][353987960101708][428 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:45:05][353987960101708][428 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:45:05][353987960101708][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353987960101708\",\"model\":\"SM-A135U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8386\"}'\'' -e'"" [2025-09-06 12:45:05][353987960101708][428 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:45:05][353987960101708][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353987960101708\",\"model\":\"SM-A135U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8386\"}'\'' -e'"" [2025-09-06 12:45:10][353987960101708][5208 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a977ae0-41aa-4fe1-bd08-6c0914382b8c","id":"QR_6a977ae0-41aa-4fe1-bd08-6c0914382b8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:45:10][353987960101708][5364 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-06 12:45:10][353987960101708][5364 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-06 12:45:10][353987960101708][5364 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:45:14][351786693012238][0 ms][INFO] === Request start === [2025-09-06 12:45:14][351786693012238][1 ms][DEBUG] START check_scloud [2025-09-06 12:45:14][351786693012238][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:45:15][351786693012238][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 11521 4926 24674412 147712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:45:15][351786693012238][323 ms][DEBUG] targetPkg: running [2025-09-06 12:45:15][351786693012238][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 12:45:15][351786693012238][323 ms][DEBUG] START check_boot_completed [2025-09-06 12:45:15][351786693012238][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:45:15][351786693012238][370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:45:15][351786693012238][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:45:15][351786693012238][432 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:45:15][351786693012238][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:45:15][351786693012238][432 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:45:15][351786693012238][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693012238\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4709\"}'\'' -e'"" [2025-09-06 12:45:15][351786693012238][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:45:15][351786693012238][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693012238\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4709\"}'\'' -e'"" [2025-09-06 12:45:18][351786693012238][3712 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09ce4480-89e8-48be-a4bd-06b9bf295842","id":"QR_09ce4480-89e8-48be-a4bd-06b9bf295842","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:45:18][351786693012238][3868 ms][DEBUG] proc_open done in 3436 ms; code=255; res.len=3343 [2025-09-06 12:45:18][351786693012238][3869 ms][DEBUG] END runCmdUntilRes#1 in 3436 ms [2025-09-06 12:45:18][351786693012238][3869 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:45:25][358543583925661][0 ms][INFO] === Request start === [2025-09-06 12:45:25][358543583925661][1 ms][DEBUG] START check_scloud [2025-09-06 12:45:25][358543583925661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:45:25][358543583925661][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 11521 4926 24808820 159400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:45:25][358543583925661][308 ms][DEBUG] targetPkg: running [2025-09-06 12:45:25][358543583925661][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 12:45:25][358543583925661][309 ms][DEBUG] START check_boot_completed [2025-09-06 12:45:25][358543583925661][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:45:25][358543583925661][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:45:25][358543583925661][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:45:25][358543583925661][404 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 12:45:25][358543583925661][404 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 12:45:25][358543583925661][404 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:45:25][358543583925661][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543583925661\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8069\"}'\'' -e'"" [2025-09-06 12:45:25][358543583925661][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:45:25][358543583925661][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543583925661\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8069\"}'\'' -e'"" [2025-09-06 12:45:29][358543583925661][4682 ms][DEBUG] proc_open done in 4278 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 12:45:29][358543583925661][4682 ms][DEBUG] END runCmdUntilRes#1 in 4278 ms [2025-09-06 12:45:29][358543583925661][4682 ms][WARN] Detected error: Process with pid 11521 either refused to load frida-agent, or terminated during injectionProcess with pid 11521 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 12:45:29][358543583925661][4682 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 12:45:30][358543583925661][4979 ms][DEBUG] SU: done in 297 ms; outsystem 5341 4926 12816156 571216 ep_poll 0 S system_server\n [2025-09-06 12:45:30][358543583925661][4979 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 12:45:30][358543583925661][5104 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 12:45:30][358543583925661][5104 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 12:45:30][358543583925661][5104 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 12:45:30][358543583925661][5245 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 12:45:30][358543583925661][5245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 12:45:30][358543583925661][5387 ms][DEBUG] SU: done in 142 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 12:45:32][358543583925661][7400 ms][DEBUG] START check_boot_completed [2025-09-06 12:45:32][358543583925661][7400 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:45:32][358543583925661][7447 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:45:32][358543583925661][7447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:45:32][358543583925661][7494 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:45:32][358543583925661][7494 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:45:35][358543583925661][10509 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 12:45:35][358543583925661][10509 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543583925661\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8069\"}'\'' -e'"" [2025-09-06 12:45:39][358543583925661][13992 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf345f71-64c1-4d65-8417-646aae7f8ebc","id":"QR_cf345f71-64c1-4d65-8417-646aae7f8ebc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:45:39][358543583925661][14149 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-09-06 12:45:39][358543583925661][14149 ms][DEBUG] END runCmdUntilRes#2 in 3640 ms [2025-09-06 12:45:39][358543583925661][14149 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:46:03][350471129285267][0 ms][INFO] === Request start === [2025-09-06 12:46:03][350471129285267][1 ms][DEBUG] START check_scloud [2025-09-06 12:46:03][350471129285267][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:46:03][350471129285267][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 18147 4926 23449336 126664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:46:03][350471129285267][316 ms][DEBUG] targetPkg: running [2025-09-06 12:46:03][350471129285267][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 12:46:03][350471129285267][316 ms][DEBUG] START check_boot_completed [2025-09-06 12:46:03][350471129285267][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:46:03][350471129285267][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:46:03][350471129285267][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:46:03][350471129285267][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:46:03][350471129285267][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:46:03][350471129285267][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:46:04][350471129285267][550 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 792\nsuccessfulTxPacketsPerSecond: 7.351005070451782\nretriedTxPackets: 92\nretriedTxPacketsPerSecond: 1.7045185347479856\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 808\nsuccessfulRxPacketsPerSecond: 7.447940482097996\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:46:04][350471129285267][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:46:04][350471129285267][1003 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=325 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 325.073/325.073/325.073/0.000 ms\n [2025-09-06 12:46:04][350471129285267][1003 ms][DEBUG] check_internet: online [2025-09-06 12:46:04][350471129285267][1003 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:46:04][350471129285267][1003 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471129285267\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9474\"}'\'' -e'"" [2025-09-06 12:46:04][350471129285267][1003 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:46:04][350471129285267][1003 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471129285267\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9474\"}'\'' -e'"" [2025-09-06 12:46:07][350471129285267][4392 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f237138-a959-4ff9-b26c-77bf44083c85","id":"QR_6f237138-a959-4ff9-b26c-77bf44083c85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:46:08][350471129285267][4549 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=3343 [2025-09-06 12:46:08][350471129285267][4549 ms][DEBUG] END runCmdUntilRes#1 in 3545 ms [2025-09-06 12:46:08][350471129285267][4549 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:46:10][350471129285267][0 ms][INFO] === Request start === [2025-09-06 12:46:10][350471129285267][1 ms][DEBUG] START check_scloud [2025-09-06 12:46:10][350471129285267][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:46:10][350471129285267][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 18147 4926 23591808 137208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:46:10][350471129285267][333 ms][DEBUG] targetPkg: running [2025-09-06 12:46:10][350471129285267][333 ms][DEBUG] END check_scloud in 333 ms [2025-09-06 12:46:10][350471129285267][333 ms][DEBUG] START check_boot_completed [2025-09-06 12:46:10][350471129285267][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:46:10][350471129285267][380 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:46:10][350471129285267][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:46:10][350471129285267][442 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:46:10][350471129285267][442 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:46:10][350471129285267][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:46:11][350471129285267][568 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 792\nsuccessfulTxPacketsPerSecond: 7.351005070451782\nretriedTxPackets: 92\nretriedTxPacketsPerSecond: 1.7045185347479856\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 808\nsuccessfulRxPacketsPerSecond: 7.447940482097996\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:46:11][350471129285267][568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:46:11][350471129285267][942 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.040/272.040/272.040/0.000 ms\n [2025-09-06 12:46:11][350471129285267][942 ms][DEBUG] check_internet: online [2025-09-06 12:46:11][350471129285267][942 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:46:11][350471129285267][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471129285267\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1683\"}'\'' -e'"" [2025-09-06 12:46:11][350471129285267][942 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:46:11][350471129285267][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471129285267\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1683\"}'\'' -e'"" [2025-09-06 12:46:17][350471129285267][6597 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5483a356-21c7-443d-b594-cdabe93ff8c1","id":"QR_5483a356-21c7-443d-b594-cdabe93ff8c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:46:17][350471129285267][6753 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3343 [2025-09-06 12:46:17][350471129285267][6753 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-09-06 12:46:17][350471129285267][6754 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:46:21][358438736835695][1 ms][INFO] === Request start === [2025-09-06 12:46:21][358438736835695][1 ms][DEBUG] START check_scloud [2025-09-06 12:46:21][358438736835695][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:46:21][358438736835695][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 18147 4926 23742472 148804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:46:21][358438736835695][298 ms][DEBUG] targetPkg: running [2025-09-06 12:46:21][358438736835695][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 12:46:21][358438736835695][298 ms][DEBUG] START check_boot_completed [2025-09-06 12:46:21][358438736835695][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:46:21][358438736835695][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:46:21][358438736835695][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:46:21][358438736835695][392 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 12:46:21][358438736835695][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:46:21][358438736835695][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:46:21][358438736835695][516 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 792\nsuccessfulTxPacketsPerSecond: 7.351005070451782\nretriedTxPackets: 92\nretriedTxPacketsPerSecond: 1.7045185347479856\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 808\nsuccessfulRxPacketsPerSecond: 7.447940482097996\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:46:21][358438736835695][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:46:22][358438736835695][923 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=321 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 321.173/321.173/321.173/0.000 ms\n [2025-09-06 12:46:22][358438736835695][923 ms][DEBUG] check_internet: online [2025-09-06 12:46:22][358438736835695][923 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:46:22][358438736835695][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736835695\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9346\"}'\'' -e'"" [2025-09-06 12:46:22][358438736835695][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:46:22][358438736835695][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736835695\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9346\"}'\'' -e'"" [2025-09-06 12:46:25][358438736835695][4422 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47c9ce66-1740-44e2-9250-a88a22b71e69","id":"QR_47c9ce66-1740-44e2-9250-a88a22b71e69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:46:25][358438736835695][4578 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-06 12:46:25][358438736835695][4578 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-06 12:46:25][358438736835695][4578 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:46:28][358438736835695][0 ms][INFO] === Request start === [2025-09-06 12:46:28][358438736835695][1 ms][DEBUG] START check_scloud [2025-09-06 12:46:28][358438736835695][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:46:28][358438736835695][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 18147 4926 23884908 160028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:46:28][358438736835695][260 ms][DEBUG] targetPkg: running [2025-09-06 12:46:28][358438736835695][260 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 12:46:28][358438736835695][260 ms][DEBUG] START check_boot_completed [2025-09-06 12:46:28][358438736835695][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:46:28][358438736835695][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:46:28][358438736835695][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:46:28][358438736835695][355 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 12:46:28][358438736835695][355 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:46:28][358438736835695][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:46:28][358438736835695][478 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 792\nsuccessfulTxPacketsPerSecond: 7.351005070451782\nretriedTxPackets: 92\nretriedTxPacketsPerSecond: 1.7045185347479856\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 808\nsuccessfulRxPacketsPerSecond: 7.447940482097996\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:46:28][358438736835695][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:46:29][358438736835695][916 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=309 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 309.882/309.882/309.882/0.000 ms\n [2025-09-06 12:46:29][358438736835695][916 ms][DEBUG] check_internet: online [2025-09-06 12:46:29][358438736835695][916 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:46:29][358438736835695][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736835695\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2940\"}'\'' -e'"" [2025-09-06 12:46:29][358438736835695][916 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:46:29][358438736835695][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736835695\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2940\"}'\'' -e'"" [2025-09-06 12:46:34][358438736835695][5758 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47003a0f-4e6c-4eb3-8f43-d2f00a3c8a78","id":"QR_47003a0f-4e6c-4eb3-8f43-d2f00a3c8a78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:46:34][358438736835695][5914 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-06 12:46:34][358438736835695][5914 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-06 12:46:34][358438736835695][5915 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:49:03][351007332073162][1 ms][INFO] === Request start === [2025-09-06 12:49:03][351007332073162][1 ms][DEBUG] START check_scloud [2025-09-06 12:49:03][351007332073162][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:49:04][351007332073162][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 18147 4926 23991484 170900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:49:04][351007332073162][282 ms][DEBUG] targetPkg: running [2025-09-06 12:49:04][351007332073162][282 ms][DEBUG] END check_scloud in 281 ms [2025-09-06 12:49:04][351007332073162][282 ms][DEBUG] START check_boot_completed [2025-09-06 12:49:04][351007332073162][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:49:04][351007332073162][313 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:49:04][351007332073162][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:49:04][351007332073162][376 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 12:49:04][351007332073162][376 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:49:04][351007332073162][376 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:49:04][351007332073162][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007332073162\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4534\"}'\'' -e'"" [2025-09-06 12:49:04][351007332073162][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:49:04][351007332073162][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007332073162\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4534\"}'\'' -e'"" [2025-09-06 12:49:08][351007332073162][5062 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9211787-8174-48ab-bd57-05ffb7f4bf25","id":"QR_c9211787-8174-48ab-bd57-05ffb7f4bf25","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:49:09][351007332073162][5219 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-06 12:49:09][351007332073162][5219 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-06 12:49:09][351007332073162][5219 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:49:11][351007332073162][0 ms][INFO] === Request start === [2025-09-06 12:49:11][351007332073162][1 ms][DEBUG] START check_scloud [2025-09-06 12:49:11][351007332073162][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:49:11][351007332073162][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 18147 4926 24166788 182872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:49:11][351007332073162][322 ms][DEBUG] targetPkg: running [2025-09-06 12:49:11][351007332073162][322 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 12:49:11][351007332073162][322 ms][DEBUG] START check_boot_completed [2025-09-06 12:49:11][351007332073162][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:49:11][351007332073162][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:49:11][351007332073162][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:49:11][351007332073162][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:49:11][351007332073162][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:49:11][351007332073162][416 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:49:11][351007332073162][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007332073162\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7504\"}'\'' -e'"" [2025-09-06 12:49:11][351007332073162][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:49:11][351007332073162][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007332073162\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7504\"}'\'' -e'"" [2025-09-06 12:49:16][351007332073162][5383 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fdf58f1e-06c7-4a07-9a7d-ac62876e11cd","id":"QR_fdf58f1e-06c7-4a07-9a7d-ac62876e11cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:49:17][351007332073162][5539 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-06 12:49:17][351007332073162][5539 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-06 12:49:17][351007332073162][5540 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:51:03][354838359902033][0 ms][INFO] === Request start === [2025-09-06 12:51:03][354838359902033][1 ms][DEBUG] START check_scloud [2025-09-06 12:51:03][354838359902033][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:51:03][354838359902033][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 18147 4926 24282692 194360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:51:03][354838359902033][324 ms][DEBUG] targetPkg: running [2025-09-06 12:51:03][354838359902033][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-06 12:51:03][354838359902033][324 ms][DEBUG] START check_boot_completed [2025-09-06 12:51:03][354838359902033][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:51:03][354838359902033][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:51:03][354838359902033][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:51:03][354838359902033][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:51:03][354838359902033][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:51:03][354838359902033][433 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:51:03][354838359902033][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838359902033\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2018\"}'\'' -e'"" [2025-09-06 12:51:03][354838359902033][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:51:03][354838359902033][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838359902033\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2018\"}'\'' -e'"" [2025-09-06 12:51:08][354838359902033][4979 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d83d1594-2f60-4c59-88e5-49ada655b175","id":"QR_d83d1594-2f60-4c59-88e5-49ada655b175","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:51:08][354838359902033][5135 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-06 12:51:08][354838359902033][5135 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-06 12:51:08][354838359902033][5135 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:51:10][354838359902033][1 ms][INFO] === Request start === [2025-09-06 12:51:10][354838359902033][1 ms][DEBUG] START check_scloud [2025-09-06 12:51:10][354838359902033][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:51:11][354838359902033][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 18147 4926 24451916 204004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:51:11][354838359902033][313 ms][DEBUG] targetPkg: running [2025-09-06 12:51:11][354838359902033][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 12:51:11][354838359902033][313 ms][DEBUG] START check_boot_completed [2025-09-06 12:51:11][354838359902033][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:51:11][354838359902033][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:51:11][354838359902033][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:51:11][354838359902033][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:51:11][354838359902033][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:51:11][354838359902033][406 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:51:11][354838359902033][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838359902033\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4772\"}'\'' -e'"" [2025-09-06 12:51:11][354838359902033][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:51:11][354838359902033][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838359902033\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4772\"}'\'' -e'"" [2025-09-06 12:51:16][354838359902033][5311 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13adefd2-111d-41a6-9227-aa6205af5214","id":"QR_13adefd2-111d-41a6-9227-aa6205af5214","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:51:16][354838359902033][5467 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-06 12:51:16][354838359902033][5467 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-06 12:51:16][354838359902033][5468 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:55:03][351786692921579][1 ms][INFO] === Request start === [2025-09-06 12:55:03][351786692921579][1 ms][DEBUG] START check_scloud [2025-09-06 12:55:03][351786692921579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:55:03][351786692921579][243 ms][DEBUG] SU: done in 242 ms; outu0_a118 18147 4926 24571788 214972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:55:03][351786692921579][243 ms][DEBUG] targetPkg: running [2025-09-06 12:55:03][351786692921579][243 ms][DEBUG] END check_scloud in 242 ms [2025-09-06 12:55:03][351786692921579][243 ms][DEBUG] START check_boot_completed [2025-09-06 12:55:03][351786692921579][243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:55:03][351786692921579][274 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:55:03][351786692921579][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:55:03][351786692921579][321 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:55:03][351786692921579][321 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 12:55:03][351786692921579][321 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:55:03][351786692921579][321 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692921579\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3860\"}'\'' -e'"" [2025-09-06 12:55:03][351786692921579][321 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:55:03][351786692921579][321 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692921579\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3860\"}'\'' -e'"" [2025-09-06 12:55:08][351786692921579][4867 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_915a16c5-3289-4046-b57a-a91286257035","id":"QR_915a16c5-3289-4046-b57a-a91286257035","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:55:08][351786692921579][5023 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-06 12:55:08][351786692921579][5023 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-06 12:55:08][351786692921579][5023 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:55:11][351786692921579][0 ms][INFO] === Request start === [2025-09-06 12:55:11][351786692921579][1 ms][DEBUG] START check_scloud [2025-09-06 12:55:11][351786692921579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:55:11][351786692921579][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18147 4926 24746964 226700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:55:11][351786692921579][305 ms][DEBUG] targetPkg: running [2025-09-06 12:55:11][351786692921579][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 12:55:11][351786692921579][305 ms][DEBUG] START check_boot_completed [2025-09-06 12:55:11][351786692921579][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:55:11][351786692921579][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:55:11][351786692921579][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:55:11][351786692921579][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 12:55:11][351786692921579][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 12:55:11][351786692921579][414 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:55:11][351786692921579][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692921579\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4210\"}'\'' -e'"" [2025-09-06 12:55:11][351786692921579][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:55:11][351786692921579][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692921579\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4210\"}'\'' -e'"" [2025-09-06 12:55:16][351786692921579][5257 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4a4c062-35a9-46fa-ae77-6f0764ae588c","id":"QR_c4a4c062-35a9-46fa-ae77-6f0764ae588c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:55:16][351786692921579][5413 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-06 12:55:16][351786692921579][5413 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-06 12:55:16][351786692921579][5413 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:55:20][357962509452033][0 ms][INFO] === Request start === [2025-09-06 12:55:20][357962509452033][1 ms][DEBUG] START check_scloud [2025-09-06 12:55:20][357962509452033][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:55:20][357962509452033][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18147 4926 24920156 237496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:55:20][357962509452033][313 ms][DEBUG] targetPkg: running [2025-09-06 12:55:20][357962509452033][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 12:55:20][357962509452033][313 ms][DEBUG] START check_boot_completed [2025-09-06 12:55:20][357962509452033][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:55:20][357962509452033][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:55:20][357962509452033][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:55:21][357962509452033][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:55:21][357962509452033][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:55:21][357962509452033][406 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:55:21][357962509452033][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509452033\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9683\"}'\'' -e'"" [2025-09-06 12:55:21][357962509452033][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:55:21][357962509452033][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509452033\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9683\"}'\'' -e'"" [2025-09-06 12:55:24][357962509452033][4234 ms][DEBUG] proc_open done in 3827 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 12:55:24][357962509452033][4234 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-06 12:55:24][357962509452033][4234 ms][WARN] Detected error: Process with pid 18147 either refused to load frida-agent, or terminated during injectionProcess with pid 18147 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 12:55:24][357962509452033][4234 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 12:55:25][357962509452033][4484 ms][DEBUG] SU: done in 250 ms; outsystem 5341 4926 12421424 250176 ep_poll 0 S system_server\n [2025-09-06 12:55:25][357962509452033][4484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 12:55:25][357962509452033][4609 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 12:55:25][357962509452033][4609 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 12:55:25][357962509452033][4609 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 12:55:25][357962509452033][4734 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 12:55:25][357962509452033][4734 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 12:55:25][357962509452033][4890 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 12:55:27][357962509452033][6905 ms][DEBUG] START check_boot_completed [2025-09-06 12:55:27][357962509452033][6905 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:55:27][357962509452033][6952 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 12:55:27][357962509452033][6952 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:55:27][357962509452033][6999 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:55:27][357962509452033][6999 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:55:30][357962509452033][10014 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 12:55:30][357962509452033][10014 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509452033\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9683\"}'\'' -e'"" [2025-09-06 12:55:33][357962509452033][13310 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4168606a-6afd-4925-9ef7-af7282e48891","id":"QR_4168606a-6afd-4925-9ef7-af7282e48891","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:55:34][357962509452033][13466 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-06 12:55:34][357962509452033][13466 ms][DEBUG] END runCmdUntilRes#2 in 3453 ms [2025-09-06 12:55:34][357962509452033][13466 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:55:36][357962509452033][0 ms][INFO] === Request start === [2025-09-06 12:55:36][357962509452033][0 ms][DEBUG] START check_scloud [2025-09-06 12:55:36][357962509452033][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:55:36][357962509452033][244 ms][DEBUG] SU: done in 244 ms; outu0_a118 19653 4926 23508156 124504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:55:36][357962509452033][245 ms][DEBUG] targetPkg: running [2025-09-06 12:55:36][357962509452033][245 ms][DEBUG] END check_scloud in 244 ms [2025-09-06 12:55:36][357962509452033][245 ms][DEBUG] START check_boot_completed [2025-09-06 12:55:36][357962509452033][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:55:36][357962509452033][291 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:55:36][357962509452033][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:55:36][357962509452033][338 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:55:36][357962509452033][338 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 12:55:36][357962509452033][338 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:55:36][357962509452033][338 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509452033\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7234\"}'\'' -e'"" [2025-09-06 12:55:36][357962509452033][338 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:55:36][357962509452033][338 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509452033\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7234\"}'\'' -e'"" [2025-09-06 12:55:41][357962509452033][4790 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36aed809-773f-43d6-972f-8e0814b6d782","id":"QR_36aed809-773f-43d6-972f-8e0814b6d782","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:55:41][357962509452033][4946 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-06 12:55:41][357962509452033][4946 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-06 12:55:41][357962509452033][4946 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:56:04][356923581027789][0 ms][INFO] === Request start === [2025-09-06 12:56:04][356923581027789][1 ms][DEBUG] START check_scloud [2025-09-06 12:56:04][356923581027789][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:56:04][356923581027789][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 19653 4926 23567512 138348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:56:04][356923581027789][318 ms][DEBUG] targetPkg: running [2025-09-06 12:56:04][356923581027789][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 12:56:04][356923581027789][318 ms][DEBUG] START check_boot_completed [2025-09-06 12:56:04][356923581027789][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:56:04][356923581027789][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:56:04][356923581027789][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:56:04][356923581027789][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:56:04][356923581027789][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 12:56:04][356923581027789][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:56:04][356923581027789][505 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1518\nsuccessfulTxPacketsPerSecond: 0.6312040715984745\nretriedTxPackets: 275\nretriedTxPacketsPerSecond: 0.1661063346311775\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1435\nsuccessfulRxPacketsPerSecond: 0.5381845242050151\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:56:04][356923581027789][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:56:05][356923581027789][1911 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.152/303.152/303.152/0.000 ms\n [2025-09-06 12:56:05][356923581027789][1911 ms][DEBUG] check_internet: online [2025-09-06 12:56:05][356923581027789][1911 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:56:05][356923581027789][1912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923581027789\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6980\"}'\'' -e'"" [2025-09-06 12:56:05][356923581027789][1912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:56:05][356923581027789][1912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923581027789\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6980\"}'\'' -e'"" [2025-09-06 12:56:09][356923581027789][5442 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ef81ac8-1089-43ec-9102-f5bd65ba5a6b","id":"QR_5ef81ac8-1089-43ec-9102-f5bd65ba5a6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:56:09][356923581027789][5598 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-09-06 12:56:09][356923581027789][5598 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-06 12:56:09][356923581027789][5598 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:56:11][356923581027789][0 ms][INFO] === Request start === [2025-09-06 12:56:11][356923581027789][1 ms][DEBUG] START check_scloud [2025-09-06 12:56:11][356923581027789][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:56:12][356923581027789][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 19653 4926 23732128 150036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:56:12][356923581027789][260 ms][DEBUG] targetPkg: running [2025-09-06 12:56:12][356923581027789][260 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 12:56:12][356923581027789][260 ms][DEBUG] START check_boot_completed [2025-09-06 12:56:12][356923581027789][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:56:12][356923581027789][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 12:56:12][356923581027789][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:56:12][356923581027789][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:56:12][356923581027789][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 12:56:12][356923581027789][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 12:56:12][356923581027789][463 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1518\nsuccessfulTxPacketsPerSecond: 0.6312040715984745\nretriedTxPackets: 275\nretriedTxPacketsPerSecond: 0.1661063346311775\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1435\nsuccessfulRxPacketsPerSecond: 0.5381845242050151\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 12:56:12][356923581027789][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 12:56:12][356923581027789][901 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=327 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 327.202/327.202/327.202/0.000 ms\n [2025-09-06 12:56:12][356923581027789][901 ms][DEBUG] check_internet: online [2025-09-06 12:56:12][356923581027789][901 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:56:12][356923581027789][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923581027789\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5216\"}'\'' -e'"" [2025-09-06 12:56:12][356923581027789][901 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:56:12][356923581027789][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923581027789\",\"model\":\"SM-A156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5216\"}'\'' -e'"" [2025-09-06 12:56:17][356923581027789][5759 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c212bb8a-428e-40ef-92de-1b0aaeac55d1","id":"QR_c212bb8a-428e-40ef-92de-1b0aaeac55d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:56:17][356923581027789][5915 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 12:56:17][356923581027789][5915 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 12:56:17][356923581027789][5915 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:57:03][355416332609485][0 ms][INFO] === Request start === [2025-09-06 12:57:03][355416332609485][1 ms][DEBUG] START check_scloud [2025-09-06 12:57:03][355416332609485][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:57:03][355416332609485][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 19653 4926 23870560 160656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:57:03][355416332609485][285 ms][DEBUG] targetPkg: running [2025-09-06 12:57:03][355416332609485][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 12:57:03][355416332609485][285 ms][DEBUG] START check_boot_completed [2025-09-06 12:57:03][355416332609485][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:57:03][355416332609485][316 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:57:03][355416332609485][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:57:03][355416332609485][363 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:57:03][355416332609485][363 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 12:57:03][355416332609485][363 ms][DEBUG] rawBody.length=1150 [2025-09-06 12:57:03][355416332609485][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416332609485\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3524\"}'\'' -e'"" [2025-09-06 12:57:03][355416332609485][363 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:57:03][355416332609485][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416332609485\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3524\"}'\'' -e'"" [2025-09-06 12:57:07][355416332609485][3909 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4451300-8296-4383-af81-87268fee3b06","id":"QR_b4451300-8296-4383-af81-87268fee3b06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:57:07][355416332609485][4066 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-06 12:57:07][355416332609485][4066 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-06 12:57:07][355416332609485][4066 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 12:57:09][355416332609485][1 ms][INFO] === Request start === [2025-09-06 12:57:09][355416332609485][1 ms][DEBUG] START check_scloud [2025-09-06 12:57:09][355416332609485][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 12:57:09][355416332609485][254 ms][DEBUG] SU: done in 252 ms; outu0_a118 19653 4926 24006888 171504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 12:57:09][355416332609485][254 ms][DEBUG] targetPkg: running [2025-09-06 12:57:09][355416332609485][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 12:57:09][355416332609485][254 ms][DEBUG] START check_boot_completed [2025-09-06 12:57:09][355416332609485][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 12:57:10][355416332609485][285 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 12:57:10][355416332609485][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 12:57:10][355416332609485][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 12:57:10][355416332609485][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 12:57:10][355416332609485][332 ms][DEBUG] rawBody.length=1160 [2025-09-06 12:57:10][355416332609485][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416332609485\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6845\"}'\'' -e'"" [2025-09-06 12:57:10][355416332609485][332 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 12:57:10][355416332609485][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416332609485\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6845\"}'\'' -e'"" [2025-09-06 12:57:14][355416332609485][4612 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c250459-3ee1-4bec-8672-2b649ad28406","id":"QR_8c250459-3ee1-4bec-8672-2b649ad28406","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 12:57:14][355416332609485][4768 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-09-06 12:57:14][355416332609485][4768 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-09-06 12:57:14][355416332609485][4768 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:00:03][355416332405959][1 ms][INFO] === Request start === [2025-09-06 13:00:03][355416332405959][1 ms][DEBUG] START check_scloud [2025-09-06 13:00:03][355416332405959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:00:04][355416332405959][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 19653 4926 24123740 183908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:00:04][355416332405959][270 ms][DEBUG] targetPkg: running [2025-09-06 13:00:04][355416332405959][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-06 13:00:04][355416332405959][270 ms][DEBUG] START check_boot_completed [2025-09-06 13:00:04][355416332405959][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:00:04][355416332405959][317 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:00:04][355416332405959][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:00:04][355416332405959][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:00:04][355416332405959][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:00:04][355416332405959][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:00:04][355416332405959][473 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1764\nsuccessfulTxPacketsPerSecond: 0.16111831454898382\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.03068920277123501\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1651\nsuccessfulRxPacketsPerSecond: 0.16111831454898382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:00:04][355416332405959][473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:00:04][355416332405959][863 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=283 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 283.383/283.383/283.383/0.000 ms\n [2025-09-06 13:00:04][355416332405959][863 ms][DEBUG] check_internet: online [2025-09-06 13:00:04][355416332405959][863 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:00:04][355416332405959][863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416332405959\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7147\"}'\'' -e'"" [2025-09-06 13:00:04][355416332405959][864 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:00:04][355416332405959][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416332405959\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7147\"}'\'' -e'"" [2025-09-06 13:00:09][355416332405959][6018 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d311005-ef98-4252-a37f-02a4b2d9bd5a","id":"QR_0d311005-ef98-4252-a37f-02a4b2d9bd5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:00:10][355416332405959][6175 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 13:00:10][355416332405959][6175 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 13:00:10][355416332405959][6175 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:00:12][355416332405959][0 ms][INFO] === Request start === [2025-09-06 13:00:12][355416332405959][1 ms][DEBUG] START check_scloud [2025-09-06 13:00:12][355416332405959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:00:12][355416332405959][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 19653 4926 24272476 194132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:00:12][355416332405959][320 ms][DEBUG] targetPkg: running [2025-09-06 13:00:12][355416332405959][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 13:00:12][355416332405959][320 ms][DEBUG] START check_boot_completed [2025-09-06 13:00:12][355416332405959][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:00:12][355416332405959][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:00:12][355416332405959][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:00:12][355416332405959][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:00:12][355416332405959][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:00:12][355416332405959][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:00:12][355416332405959][523 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1764\nsuccessfulTxPacketsPerSecond: 0.16111831454898382\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.03068920277123501\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1651\nsuccessfulRxPacketsPerSecond: 0.16111831454898382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:00:12][355416332405959][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:00:13][355416332405959][944 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=325 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 325.009/325.009/325.009/0.000 ms\n [2025-09-06 13:00:13][355416332405959][945 ms][DEBUG] check_internet: online [2025-09-06 13:00:13][355416332405959][945 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:00:13][355416332405959][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416332405959\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6089\"}'\'' -e'"" [2025-09-06 13:00:13][355416332405959][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:00:13][355416332405959][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416332405959\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6089\"}'\'' -e'"" [2025-09-06 13:00:18][355416332405959][6006 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77f39658-c0ab-4936-9fcf-1e0af6fc0f07","id":"QR_77f39658-c0ab-4936-9fcf-1e0af6fc0f07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:00:18][355416332405959][6162 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 13:00:18][355416332405959][6162 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 13:00:18][355416332405959][6162 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:00:22][354595804957760][0 ms][INFO] === Request start === [2025-09-06 13:00:22][354595804957760][1 ms][DEBUG] START check_scloud [2025-09-06 13:00:22][354595804957760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:00:23][354595804957760][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 19653 4926 24437540 177780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:00:23][354595804957760][318 ms][DEBUG] targetPkg: running [2025-09-06 13:00:23][354595804957760][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 13:00:23][354595804957760][318 ms][DEBUG] START check_boot_completed [2025-09-06 13:00:23][354595804957760][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:00:23][354595804957760][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:00:23][354595804957760][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:00:23][354595804957760][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:00:23][354595804957760][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:00:23][354595804957760][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:00:23][354595804957760][567 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1764\nsuccessfulTxPacketsPerSecond: 0.16111831454898382\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.03068920277123501\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1651\nsuccessfulRxPacketsPerSecond: 0.16111831454898382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:00:23][354595804957760][567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:00:23][354595804957760][974 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.390/306.390/306.390/0.000 ms\n [2025-09-06 13:00:23][354595804957760][974 ms][DEBUG] check_internet: online [2025-09-06 13:00:23][354595804957760][974 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:00:23][354595804957760][974 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595804957760\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9255\"}'\'' -e'"" [2025-09-06 13:00:23][354595804957760][974 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:00:23][354595804957760][974 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595804957760\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9255\"}'\'' -e'"" [2025-09-06 13:00:27][354595804957760][4332 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb939615-46cc-4913-bc7d-cbff39323deb","id":"QR_eb939615-46cc-4913-bc7d-cbff39323deb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:00:27][354595804957760][4488 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-09-06 13:00:27][354595804957760][4488 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-09-06 13:00:27][354595804957760][4488 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:00:29][354595804957760][0 ms][INFO] === Request start === [2025-09-06 13:00:29][354595804957760][1 ms][DEBUG] START check_scloud [2025-09-06 13:00:29][354595804957760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:00:29][354595804957760][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 19653 4926 24602632 186276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:00:29][354595804957760][290 ms][DEBUG] targetPkg: running [2025-09-06 13:00:29][354595804957760][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-06 13:00:29][354595804957760][290 ms][DEBUG] START check_boot_completed [2025-09-06 13:00:29][354595804957760][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:00:30][354595804957760][321 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:00:30][354595804957760][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:00:30][354595804957760][384 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 13:00:30][354595804957760][384 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 13:00:30][354595804957760][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:00:30][354595804957760][556 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1764\nsuccessfulTxPacketsPerSecond: 0.16111831454898382\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.03068920277123501\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1651\nsuccessfulRxPacketsPerSecond: 0.16111831454898382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:00:30][354595804957760][556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:00:30][354595804957760][946 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.457/268.457/268.457/0.000 ms\n [2025-09-06 13:00:30][354595804957760][946 ms][DEBUG] check_internet: online [2025-09-06 13:00:30][354595804957760][946 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:00:30][354595804957760][946 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595804957760\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3946\"}'\'' -e'"" [2025-09-06 13:00:30][354595804957760][947 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:00:30][354595804957760][947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595804957760\",\"model\":\"SM-M336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3946\"}'\'' -e'"" [2025-09-06 13:00:35][354595804957760][5679 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1368c250-2d0e-44c1-b6ad-483bd082dffc","id":"QR_1368c250-2d0e-44c1-b6ad-483bd082dffc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:00:35][354595804957760][5835 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 13:00:35][354595804957760][5836 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 13:00:35][354595804957760][5836 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:03:03][352133647660250][1 ms][INFO] === Request start === [2025-09-06 13:03:03][352133647660250][1 ms][DEBUG] START check_scloud [2025-09-06 13:03:03][352133647660250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:03:03][352133647660250][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 19653 4926 24716452 178192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:03:03][352133647660250][258 ms][DEBUG] targetPkg: running [2025-09-06 13:03:03][352133647660250][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-06 13:03:03][352133647660250][258 ms][DEBUG] START check_boot_completed [2025-09-06 13:03:03][352133647660250][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:03:03][352133647660250][290 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:03:03][352133647660250][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:03:03][352133647660250][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:03:03][352133647660250][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:03:03][352133647660250][337 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:03:03][352133647660250][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133647660250\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2733\"}'\'' -e'"" [2025-09-06 13:03:03][352133647660250][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:03:03][352133647660250][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133647660250\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2733\"}'\'' -e'"" [2025-09-06 13:03:08][352133647660250][5007 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8bd26ba6-da80-4545-89b6-fd8cd4d8088a","id":"QR_8bd26ba6-da80-4545-89b6-fd8cd4d8088a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:03:08][352133647660250][5164 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-06 13:03:08][352133647660250][5164 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-06 13:03:08][352133647660250][5164 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:03:11][352133647660250][0 ms][INFO] === Request start === [2025-09-06 13:03:11][352133647660250][1 ms][DEBUG] START check_scloud [2025-09-06 13:03:11][352133647660250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:03:11][352133647660250][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 19653 4926 24893868 189080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:03:11][352133647660250][268 ms][DEBUG] targetPkg: running [2025-09-06 13:03:11][352133647660250][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-06 13:03:11][352133647660250][268 ms][DEBUG] START check_boot_completed [2025-09-06 13:03:11][352133647660250][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:03:11][352133647660250][300 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:03:11][352133647660250][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:03:11][352133647660250][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:03:11][352133647660250][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:03:11][352133647660250][346 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:03:11][352133647660250][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133647660250\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2978\"}'\'' -e'"" [2025-09-06 13:03:11][352133647660250][346 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:03:11][352133647660250][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133647660250\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2978\"}'\'' -e'"" [2025-09-06 13:03:15][352133647660250][4424 ms][DEBUG] proc_open done in 4077 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 13:03:15][352133647660250][4424 ms][DEBUG] END runCmdUntilRes#1 in 4078 ms [2025-09-06 13:03:15][352133647660250][4424 ms][WARN] Detected error: Process with pid 19653 either refused to load frida-agent, or terminated during injectionProcess with pid 19653 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 13:03:15][352133647660250][4424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 13:03:15][352133647660250][4705 ms][DEBUG] SU: done in 281 ms; outsystem 5341 4926 12438860 237256 ep_poll 0 S system_server\n [2025-09-06 13:03:15][352133647660250][4705 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 13:03:15][352133647660250][4845 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 13:03:15][352133647660250][4846 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 13:03:15][352133647660250][4846 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 13:03:16][352133647660250][4971 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 13:03:16][352133647660250][4971 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 13:03:16][352133647660250][5158 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 13:03:18][352133647660250][7173 ms][DEBUG] START check_boot_completed [2025-09-06 13:03:18][352133647660250][7173 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:03:18][352133647660250][7220 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:03:18][352133647660250][7220 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:03:18][352133647660250][7267 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:03:18][352133647660250][7267 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 13:03:21][352133647660250][10281 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 13:03:21][352133647660250][10282 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133647660250\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2978\"}'\'' -e'"" [2025-09-06 13:03:26][352133647660250][15312 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e6ab385c-2fbc-43c4-ac86-31176364e952","id":"QR_e6ab385c-2fbc-43c4-ac86-31176364e952","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:03:26][352133647660250][15468 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-06 13:03:26][352133647660250][15468 ms][DEBUG] END runCmdUntilRes#2 in 5187 ms [2025-09-06 13:03:26][352133647660250][15468 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:03:30][355910681033479][0 ms][INFO] === Request start === [2025-09-06 13:03:30][355910681033479][1 ms][DEBUG] START check_scloud [2025-09-06 13:03:30][355910681033479][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:03:31][355910681033479][241 ms][DEBUG] SU: done in 241 ms; outu0_a118 21677 4926 23562428 124484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:03:31][355910681033479][241 ms][DEBUG] targetPkg: running [2025-09-06 13:03:31][355910681033479][242 ms][DEBUG] END check_scloud in 241 ms [2025-09-06 13:03:31][355910681033479][242 ms][DEBUG] START check_boot_completed [2025-09-06 13:03:31][355910681033479][242 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:03:31][355910681033479][288 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:03:31][355910681033479][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:03:31][355910681033479][366 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 13:03:31][355910681033479][366 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 13:03:31][355910681033479][366 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:03:31][355910681033479][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355910681033479\",\"model\":\"SM-T736B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5804\"}'\'' -e'"" [2025-09-06 13:03:31][355910681033479][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:03:31][355910681033479][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355910681033479\",\"model\":\"SM-T736B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5804\"}'\'' -e'"" [2025-09-06 13:03:34][355910681033479][3678 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da97d1cb-1ede-49a0-b841-8ea93c2fdb7f","id":"QR_da97d1cb-1ede-49a0-b841-8ea93c2fdb7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:03:34][355910681033479][3834 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-06 13:03:34][355910681033479][3834 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-09-06 13:03:34][355910681033479][3834 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:03:36][355910681033479][0 ms][INFO] === Request start === [2025-09-06 13:03:36][355910681033479][1 ms][DEBUG] START check_scloud [2025-09-06 13:03:36][355910681033479][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:03:37][355910681033479][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 21677 4926 23754064 137664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:03:37][355910681033479][314 ms][DEBUG] targetPkg: running [2025-09-06 13:03:37][355910681033479][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 13:03:37][355910681033479][314 ms][DEBUG] START check_boot_completed [2025-09-06 13:03:37][355910681033479][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:03:37][355910681033479][360 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 13:03:37][355910681033479][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:03:37][355910681033479][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:03:37][355910681033479][406 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 13:03:37][355910681033479][406 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:03:37][355910681033479][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355910681033479\",\"model\":\"SM-T736B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6810\"}'\'' -e'"" [2025-09-06 13:03:37][355910681033479][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:03:37][355910681033479][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355910681033479\",\"model\":\"SM-T736B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6810\"}'\'' -e'"" [2025-09-06 13:03:42][355910681033479][5296 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff107b6e-16b2-4450-b0fc-9117cc802201","id":"QR_ff107b6e-16b2-4450-b0fc-9117cc802201","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:03:42][355910681033479][5452 ms][DEBUG] proc_open done in 5046 ms; code=255; res.len=3343 [2025-09-06 13:03:42][355910681033479][5452 ms][DEBUG] END runCmdUntilRes#1 in 5046 ms [2025-09-06 13:03:42][355910681033479][5452 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:04:03][356729403340999][0 ms][INFO] === Request start === [2025-09-06 13:04:03][356729403340999][1 ms][DEBUG] START check_scloud [2025-09-06 13:04:03][356729403340999][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:04:04][356729403340999][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 21677 4926 23805052 149928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:04:04][356729403340999][298 ms][DEBUG] targetPkg: running [2025-09-06 13:04:04][356729403340999][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 13:04:04][356729403340999][298 ms][DEBUG] START check_boot_completed [2025-09-06 13:04:04][356729403340999][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:04:04][356729403340999][329 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:04:04][356729403340999][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:04:04][356729403340999][377 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 13:04:04][356729403340999][377 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 13:04:04][356729403340999][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:04:04][356729403340999][503 ms][DEBUG] SU: done in 126 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1764\nsuccessfulTxPacketsPerSecond: 0.16111831454898382\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.03068920277123501\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1651\nsuccessfulRxPacketsPerSecond: 0.16111831454898382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:04:04][356729403340999][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:04:06][356729403340999][2141 ms][DEBUG] SU: done in 1638 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.308/300.308/300.308/0.000 ms\n [2025-09-06 13:04:06][356729403340999][2141 ms][DEBUG] check_internet: online [2025-09-06 13:04:06][356729403340999][2141 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:04:06][356729403340999][2141 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729403340999\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2574\"}'\'' -e'"" [2025-09-06 13:04:06][356729403340999][2142 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:04:06][356729403340999][2142 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729403340999\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2574\"}'\'' -e'"" [2025-09-06 13:04:10][356729403340999][6562 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d875d19-4723-4cd5-98a8-e5a64ff662fe","id":"QR_7d875d19-4723-4cd5-98a8-e5a64ff662fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:04:10][356729403340999][6718 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-09-06 13:04:10][356729403340999][6718 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-09-06 13:04:10][356729403340999][6718 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:04:13][356729403340999][0 ms][INFO] === Request start === [2025-09-06 13:04:13][356729403340999][1 ms][DEBUG] START check_scloud [2025-09-06 13:04:13][356729403340999][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:04:13][356729403340999][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 21677 4926 23980292 160816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:04:13][356729403340999][307 ms][DEBUG] targetPkg: running [2025-09-06 13:04:13][356729403340999][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 13:04:13][356729403340999][307 ms][DEBUG] START check_boot_completed [2025-09-06 13:04:13][356729403340999][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:04:13][356729403340999][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:04:13][356729403340999][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:04:13][356729403340999][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:04:13][356729403340999][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:04:13][356729403340999][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:04:13][356729403340999][541 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1764\nsuccessfulTxPacketsPerSecond: 0.16111831454898382\nretriedTxPackets: 335\nretriedTxPacketsPerSecond: 0.03068920277123501\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1651\nsuccessfulRxPacketsPerSecond: 0.16111831454898382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:04:13][356729403340999][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:04:14][356729403340999][947 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=295 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 295.737/295.737/295.737/0.000 ms\n [2025-09-06 13:04:14][356729403340999][948 ms][DEBUG] check_internet: online [2025-09-06 13:04:14][356729403340999][948 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:04:14][356729403340999][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729403340999\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6053\"}'\'' -e'"" [2025-09-06 13:04:14][356729403340999][948 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:04:14][356729403340999][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729403340999\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6053\"}'\'' -e'"" [2025-09-06 13:04:18][356729403340999][5587 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_582c018a-d03e-430b-a183-1fa318cbd739","id":"QR_582c018a-d03e-430b-a183-1fa318cbd739","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:04:18][356729403340999][5743 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 13:04:18][356729403340999][5743 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-06 13:04:18][356729403340999][5743 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:06:04][350456243187150][1 ms][INFO] === Request start === [2025-09-06 13:06:04][350456243187150][1 ms][DEBUG] START check_scloud [2025-09-06 13:06:04][350456243187150][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:06:04][350456243187150][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 21677 4926 24092856 171660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:06:04][350456243187150][310 ms][DEBUG] targetPkg: running [2025-09-06 13:06:04][350456243187150][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 13:06:04][350456243187150][311 ms][DEBUG] START check_boot_completed [2025-09-06 13:06:04][350456243187150][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:06:04][350456243187150][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:06:04][350456243187150][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:06:04][350456243187150][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:06:04][350456243187150][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:06:04][350456243187150][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:06:05][350456243187150][513 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2057\nsuccessfulTxPacketsPerSecond: 0.9720623314234907\nretriedTxPackets: 416\nretriedTxPacketsPerSecond: 0.2687271291648558\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1902\nsuccessfulRxPacketsPerSecond: 0.8327223385231951\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:06:05][350456243187150][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:06:05][350456243187150][966 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=320 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 320.282/320.282/320.282/0.000 ms\n [2025-09-06 13:06:05][350456243187150][966 ms][DEBUG] check_internet: online [2025-09-06 13:06:05][350456243187150][966 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:06:05][350456243187150][966 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456243187150\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4445\"}'\'' -e'"" [2025-09-06 13:06:05][350456243187150][966 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:06:05][350456243187150][966 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456243187150\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4445\"}'\'' -e'"" [2025-09-06 13:06:11][350456243187150][6637 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5e6b86b-1d64-409a-bbc3-67d7a632013e","id":"QR_a5e6b86b-1d64-409a-bbc3-67d7a632013e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:06:11][350456243187150][6793 ms][DEBUG] proc_open done in 5827 ms; code=255; res.len=3343 [2025-09-06 13:06:11][350456243187150][6793 ms][DEBUG] END runCmdUntilRes#1 in 5827 ms [2025-09-06 13:06:11][350456243187150][6793 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:06:14][350456243187150][0 ms][INFO] === Request start === [2025-09-06 13:06:14][350456243187150][1 ms][DEBUG] START check_scloud [2025-09-06 13:06:14][350456243187150][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:06:15][350456243187150][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 21677 4926 24255032 183540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:06:15][350456243187150][284 ms][DEBUG] targetPkg: running [2025-09-06 13:06:15][350456243187150][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-06 13:06:15][350456243187150][284 ms][DEBUG] START check_boot_completed [2025-09-06 13:06:15][350456243187150][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:06:15][350456243187150][331 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:06:15][350456243187150][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:06:15][350456243187150][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:06:15][350456243187150][378 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:06:15][350456243187150][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:06:15][350456243187150][487 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2057\nsuccessfulTxPacketsPerSecond: 0.9720623314234907\nretriedTxPackets: 416\nretriedTxPacketsPerSecond: 0.2687271291648558\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1902\nsuccessfulRxPacketsPerSecond: 0.8327223385231951\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:06:15][350456243187150][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:06:15][350456243187150][924 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=285 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 285.924/285.924/285.924/0.000 ms\n [2025-09-06 13:06:15][350456243187150][925 ms][DEBUG] check_internet: online [2025-09-06 13:06:15][350456243187150][925 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:06:15][350456243187150][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456243187150\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6564\"}'\'' -e'"" [2025-09-06 13:06:15][350456243187150][925 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:06:15][350456243187150][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456243187150\",\"model\":\"SM-G781B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6564\"}'\'' -e'"" [2025-09-06 13:06:19][350456243187150][4642 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e4356e1-0663-44c0-b244-ead222718d78","id":"QR_4e4356e1-0663-44c0-b244-ead222718d78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:06:19][350456243187150][4798 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-09-06 13:06:19][350456243187150][4798 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-09-06 13:06:19][350456243187150][4798 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:06:21][352469859476740][0 ms][INFO] === Request start === [2025-09-06 13:06:21][352469859476740][1 ms][DEBUG] START check_scloud [2025-09-06 13:06:21][352469859476740][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:06:21][352469859476740][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 21677 4926 24395456 194432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:06:21][352469859476740][296 ms][DEBUG] targetPkg: running [2025-09-06 13:06:21][352469859476740][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 13:06:21][352469859476740][297 ms][DEBUG] START check_boot_completed [2025-09-06 13:06:21][352469859476740][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:06:21][352469859476740][343 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:06:21][352469859476740][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:06:21][352469859476740][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:06:21][352469859476740][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:06:21][352469859476740][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:06:21][352469859476740][499 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2057\nsuccessfulTxPacketsPerSecond: 0.9720623314234907\nretriedTxPackets: 416\nretriedTxPacketsPerSecond: 0.2687271291648558\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1902\nsuccessfulRxPacketsPerSecond: 0.8327223385231951\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:06:21][352469859476740][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:06:22][352469859476740][828 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.201/228.201/228.201/0.000 ms\n [2025-09-06 13:06:22][352469859476740][828 ms][DEBUG] check_internet: online [2025-09-06 13:06:22][352469859476740][828 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:06:22][352469859476740][828 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859476740\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3283\"}'\'' -e'"" [2025-09-06 13:06:22][352469859476740][828 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:06:22][352469859476740][828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859476740\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3283\"}'\'' -e'"" [2025-09-06 13:06:25][352469859476740][4123 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3b232d3-6418-4b52-95b4-bbc1b9e0ace1","id":"QR_b3b232d3-6418-4b52-95b4-bbc1b9e0ace1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:06:25][352469859476740][4280 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-06 13:06:25][352469859476740][4280 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-06 13:06:25][352469859476740][4280 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:06:28][352469859476740][0 ms][INFO] === Request start === [2025-09-06 13:06:28][352469859476740][1 ms][DEBUG] START check_scloud [2025-09-06 13:06:28][352469859476740][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:06:28][352469859476740][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 21677 4926 24527716 206584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:06:28][352469859476740][279 ms][DEBUG] targetPkg: running [2025-09-06 13:06:28][352469859476740][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-06 13:06:28][352469859476740][279 ms][DEBUG] START check_boot_completed [2025-09-06 13:06:28][352469859476740][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:06:28][352469859476740][325 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:06:28][352469859476740][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:06:28][352469859476740][388 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 13:06:28][352469859476740][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:06:28][352469859476740][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:06:28][352469859476740][512 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2057\nsuccessfulTxPacketsPerSecond: 0.9720623314234907\nretriedTxPackets: 416\nretriedTxPacketsPerSecond: 0.2687271291648558\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1902\nsuccessfulRxPacketsPerSecond: 0.8327223385231951\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:06:28][352469859476740][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:06:28][352469859476740][856 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.572/252.572/252.572/0.000 ms\n [2025-09-06 13:06:28][352469859476740][856 ms][DEBUG] check_internet: online [2025-09-06 13:06:28][352469859476740][856 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:06:28][352469859476740][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859476740\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6331\"}'\'' -e'"" [2025-09-06 13:06:28][352469859476740][857 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:06:28][352469859476740][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859476740\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6331\"}'\'' -e'"" [2025-09-06 13:06:33][352469859476740][5496 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bececa10-a665-4a1e-829d-b6cdafc7a7df","id":"QR_bececa10-a665-4a1e-829d-b6cdafc7a7df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:06:33][352469859476740][5652 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 13:06:33][352469859476740][5652 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-06 13:06:33][352469859476740][5652 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:12:03][355731678470908][1 ms][INFO] === Request start === [2025-09-06 13:12:03][355731678470908][1 ms][DEBUG] START check_scloud [2025-09-06 13:12:03][355731678470908][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:12:03][355731678470908][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 21677 4926 24657920 218172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:12:03][355731678470908][248 ms][DEBUG] targetPkg: running [2025-09-06 13:12:03][355731678470908][248 ms][DEBUG] END check_scloud in 247 ms [2025-09-06 13:12:03][355731678470908][248 ms][DEBUG] START check_boot_completed [2025-09-06 13:12:03][355731678470908][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:12:03][355731678470908][279 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 13:12:03][355731678470908][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:12:03][355731678470908][326 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:12:03][355731678470908][326 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 13:12:03][355731678470908][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:12:03][355731678470908][482 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2262\nsuccessfulTxPacketsPerSecond: 0.22177109810812193\nretriedTxPackets: 471\nretriedTxPacketsPerSecond: 0.09382623381497467\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2072\nsuccessfulRxPacketsPerSecond: 0.15353383715177674\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:12:03][355731678470908][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:12:05][355731678470908][1888 ms][DEBUG] SU: done in 1405 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.741/303.741/303.741/0.000 ms\n [2025-09-06 13:12:05][355731678470908][1888 ms][DEBUG] check_internet: online [2025-09-06 13:12:05][355731678470908][1888 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:12:05][355731678470908][1888 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678470908\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1666\"}'\'' -e'"" [2025-09-06 13:12:05][355731678470908][1888 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:12:05][355731678470908][1888 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678470908\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1666\"}'\'' -e'"" [2025-09-06 13:12:09][355731678470908][5793 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8eee895e-d4d3-43fc-b389-413e63dda2f8","id":"QR_8eee895e-d4d3-43fc-b389-413e63dda2f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:12:09][355731678470908][5949 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-06 13:12:09][355731678470908][5949 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-06 13:12:09][355731678470908][5949 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:12:11][355731678470908][0 ms][INFO] === Request start === [2025-09-06 13:12:11][355731678470908][1 ms][DEBUG] START check_scloud [2025-09-06 13:12:11][355731678470908][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:12:11][355731678470908][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 21677 4926 24793736 228992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:12:11][355731678470908][301 ms][DEBUG] targetPkg: running [2025-09-06 13:12:11][355731678470908][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-06 13:12:11][355731678470908][301 ms][DEBUG] START check_boot_completed [2025-09-06 13:12:11][355731678470908][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:12:11][355731678470908][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:12:11][355731678470908][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:12:11][355731678470908][396 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 13:12:11][355731678470908][396 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 13:12:11][355731678470908][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:12:12][355731678470908][536 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2262\nsuccessfulTxPacketsPerSecond: 0.22177109810812193\nretriedTxPackets: 471\nretriedTxPacketsPerSecond: 0.09382623381497467\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2072\nsuccessfulRxPacketsPerSecond: 0.15353383715177674\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:12:12][355731678470908][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:12:12][355731678470908][957 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.439/299.439/299.439/0.000 ms\n [2025-09-06 13:12:12][355731678470908][957 ms][DEBUG] check_internet: online [2025-09-06 13:12:12][355731678470908][957 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:12:12][355731678470908][957 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678470908\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9937\"}'\'' -e'"" [2025-09-06 13:12:12][355731678470908][957 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:12:12][355731678470908][957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678470908\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9937\"}'\'' -e'"" [2025-09-06 13:12:17][355731678470908][6330 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d33e1140-77c5-4855-960d-726f697cca28","id":"QR_d33e1140-77c5-4855-960d-726f697cca28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:12:17][355731678470908][6487 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-06 13:12:17][355731678470908][6487 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-06 13:12:17][355731678470908][6487 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:12:22][352698476613034][0 ms][INFO] === Request start === [2025-09-06 13:12:22][352698476613034][1 ms][DEBUG] START check_scloud [2025-09-06 13:12:22][352698476613034][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:12:22][352698476613034][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 21677 4926 24965008 239708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:12:22][352698476613034][301 ms][DEBUG] targetPkg: running [2025-09-06 13:12:22][352698476613034][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 13:12:22][352698476613034][301 ms][DEBUG] START check_boot_completed [2025-09-06 13:12:22][352698476613034][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:12:22][352698476613034][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:12:22][352698476613034][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:12:22][352698476613034][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:12:22][352698476613034][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:12:22][352698476613034][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:12:22][352698476613034][550 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2262\nsuccessfulTxPacketsPerSecond: 0.22177109810812193\nretriedTxPackets: 471\nretriedTxPacketsPerSecond: 0.09382623381497467\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2072\nsuccessfulRxPacketsPerSecond: 0.15353383715177674\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:12:22][352698476613034][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:12:23][352698476613034][957 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=295 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 295.622/295.622/295.622/0.000 ms\n [2025-09-06 13:12:23][352698476613034][957 ms][DEBUG] check_internet: online [2025-09-06 13:12:23][352698476613034][957 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:12:23][352698476613034][957 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698476613034\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6716\"}'\'' -e'"" [2025-09-06 13:12:23][352698476613034][957 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:12:23][352698476613034][957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698476613034\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6716\"}'\'' -e'"" [2025-09-06 13:12:26][352698476613034][4628 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 13:12:26][352698476613034][4628 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-06 13:12:26][352698476613034][4628 ms][WARN] Detected error: Process with pid 21677 either refused to load frida-agent, or terminated during injectionProcess with pid 21677 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 13:12:26][352698476613034][4628 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 13:12:27][352698476613034][4878 ms][DEBUG] SU: done in 250 ms; outsystem 5341 4926 12456296 193648 ep_poll 0 S system_server\n [2025-09-06 13:12:27][352698476613034][4878 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 13:12:27][352698476613034][5034 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 13:12:27][352698476613034][5034 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 13:12:27][352698476613034][5034 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 13:12:27][352698476613034][5190 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 13:12:27][352698476613034][5190 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 13:12:27][352698476613034][5346 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 13:12:29][352698476613034][7361 ms][DEBUG] START check_boot_completed [2025-09-06 13:12:29][352698476613034][7361 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:12:29][352698476613034][7408 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:12:29][352698476613034][7408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:12:29][352698476613034][7471 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:12:29][352698476613034][7471 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 13:12:32][352698476613034][10485 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 13:12:32][352698476613034][10486 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698476613034\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6716\"}'\'' -e'"" [2025-09-06 13:12:35][352698476613034][13672 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8310267-c2d1-423f-abdf-d034b23354fb","id":"QR_c8310267-c2d1-423f-abdf-d034b23354fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:12:36][352698476613034][13828 ms][DEBUG] proc_open done in 3343 ms; code=255; res.len=3343 [2025-09-06 13:12:36][352698476613034][13828 ms][DEBUG] END runCmdUntilRes#2 in 3343 ms [2025-09-06 13:12:36][352698476613034][13829 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:12:38][352698476613034][0 ms][INFO] === Request start === [2025-09-06 13:12:38][352698476613034][1 ms][DEBUG] START check_scloud [2025-09-06 13:12:38][352698476613034][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:12:38][352698476613034][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 23294 4926 23525924 122872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:12:38][352698476613034][246 ms][DEBUG] targetPkg: running [2025-09-06 13:12:38][352698476613034][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-06 13:12:38][352698476613034][246 ms][DEBUG] START check_boot_completed [2025-09-06 13:12:38][352698476613034][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:12:38][352698476613034][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:12:38][352698476613034][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:12:38][352698476613034][355 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:12:38][352698476613034][355 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:12:38][352698476613034][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:12:38][352698476613034][495 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2262\nsuccessfulTxPacketsPerSecond: 0.22177109810812193\nretriedTxPackets: 471\nretriedTxPacketsPerSecond: 0.09382623381497467\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2072\nsuccessfulRxPacketsPerSecond: 0.15353383715177674\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:12:38][352698476613034][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:12:39][352698476613034][870 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.247/250.247/250.247/0.000 ms\n [2025-09-06 13:12:39][352698476613034][870 ms][DEBUG] check_internet: online [2025-09-06 13:12:39][352698476613034][871 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:12:39][352698476613034][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698476613034\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8867\"}'\'' -e'"" [2025-09-06 13:12:39][352698476613034][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:12:39][352698476613034][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698476613034\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8867\"}'\'' -e'"" [2025-09-06 13:12:43][352698476613034][5291 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ec7a980-9a9c-4900-ad1a-4044190b783a","id":"QR_0ec7a980-9a9c-4900-ad1a-4044190b783a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:12:43][352698476613034][5447 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-09-06 13:12:43][352698476613034][5447 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-09-06 13:12:43][352698476613034][5447 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:15:04][350824192823671][1 ms][INFO] === Request start === [2025-09-06 13:15:04][350824192823671][1 ms][DEBUG] START check_scloud [2025-09-06 13:15:04][350824192823671][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:15:04][350824192823671][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 23294 4926 23541108 136636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:15:04][350824192823671][295 ms][DEBUG] targetPkg: running [2025-09-06 13:15:04][350824192823671][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 13:15:04][350824192823671][295 ms][DEBUG] START check_boot_completed [2025-09-06 13:15:04][350824192823671][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:15:04][350824192823671][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:15:04][350824192823671][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:15:04][350824192823671][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:15:04][350824192823671][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:15:04][350824192823671][373 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:15:04][350824192823671][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192823671\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2239\"}'\'' -e'"" [2025-09-06 13:15:04][350824192823671][373 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:15:04][350824192823671][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192823671\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2239\"}'\'' -e'"" [2025-09-06 13:15:08][350824192823671][4732 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8bd840c7-6b38-41ff-a3b3-8cc29fa9f838","id":"QR_8bd840c7-6b38-41ff-a3b3-8cc29fa9f838","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:15:09][350824192823671][4888 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-09-06 13:15:09][350824192823671][4888 ms][DEBUG] END runCmdUntilRes#1 in 4515 ms [2025-09-06 13:15:09][350824192823671][4888 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:15:19][350824192823671][0 ms][INFO] === Request start === [2025-09-06 13:15:19][350824192823671][1 ms][DEBUG] START check_scloud [2025-09-06 13:15:19][350824192823671][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:15:19][350824192823671][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 23294 4926 23712380 148484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:15:19][350824192823671][308 ms][DEBUG] targetPkg: running [2025-09-06 13:15:19][350824192823671][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 13:15:19][350824192823671][308 ms][DEBUG] START check_boot_completed [2025-09-06 13:15:19][350824192823671][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:15:20][350824192823671][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:15:20][350824192823671][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:15:20][350824192823671][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:15:20][350824192823671][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:15:20][350824192823671][417 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:15:20][350824192823671][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192823671\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3977\"}'\'' -e'"" [2025-09-06 13:15:20][350824192823671][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:15:20][350824192823671][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192823671\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3977\"}'\'' -e'"" [2025-09-06 13:15:25][350824192823671][5854 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b49739e2-550a-4356-a134-58c6de4a88d2","id":"QR_b49739e2-550a-4356-a134-58c6de4a88d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:15:25][350824192823671][6010 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-09-06 13:15:25][350824192823671][6010 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-09-06 13:15:25][350824192823671][6010 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:18:03][352469853108646][1 ms][INFO] === Request start === [2025-09-06 13:18:03][352469853108646][1 ms][DEBUG] START check_scloud [2025-09-06 13:18:03][352469853108646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:18:03][352469853108646][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 23294 4926 23862460 159648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:18:03][352469853108646][296 ms][DEBUG] targetPkg: running [2025-09-06 13:18:03][352469853108646][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-06 13:18:03][352469853108646][296 ms][DEBUG] START check_boot_completed [2025-09-06 13:18:03][352469853108646][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:18:03][352469853108646][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:18:03][352469853108646][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:18:03][352469853108646][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:18:03][352469853108646][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:18:03][352469853108646][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:18:03][352469853108646][484 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2451\nsuccessfulTxPacketsPerSecond: 0.6209731207349167\nretriedTxPackets: 521\nretriedTxPacketsPerSecond: 0.1642786033690256\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2243\nsuccessfulRxPacketsPerSecond: 0.5618328235220675\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:18:03][352469853108646][484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:18:05][352469853108646][1859 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.770/305.770/305.770/0.000 ms\n [2025-09-06 13:18:05][352469853108646][1859 ms][DEBUG] check_internet: online [2025-09-06 13:18:05][352469853108646][1859 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:18:05][352469853108646][1859 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853108646\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4474\"}'\'' -e'"" [2025-09-06 13:18:05][352469853108646][1859 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:18:05][352469853108646][1859 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853108646\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4474\"}'\'' -e'"" [2025-09-06 13:18:08][352469853108646][5530 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1562ad83-d28b-4692-98be-9e7c07a8ea82","id":"QR_1562ad83-d28b-4692-98be-9e7c07a8ea82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:18:08][352469853108646][5686 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-09-06 13:18:08][352469853108646][5686 ms][DEBUG] END runCmdUntilRes#1 in 3826 ms [2025-09-06 13:18:08][352469853108646][5686 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:18:11][352469853108646][0 ms][INFO] === Request start === [2025-09-06 13:18:11][352469853108646][1 ms][DEBUG] START check_scloud [2025-09-06 13:18:11][352469853108646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:18:11][352469853108646][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 23294 4926 24017220 170472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:18:11][352469853108646][312 ms][DEBUG] targetPkg: running [2025-09-06 13:18:11][352469853108646][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 13:18:11][352469853108646][312 ms][DEBUG] START check_boot_completed [2025-09-06 13:18:11][352469853108646][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:18:11][352469853108646][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:18:11][352469853108646][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:18:11][352469853108646][437 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 13:18:11][352469853108646][437 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 13:18:11][352469853108646][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:18:11][352469853108646][546 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2451\nsuccessfulTxPacketsPerSecond: 0.6209731207349167\nretriedTxPackets: 521\nretriedTxPacketsPerSecond: 0.1642786033690256\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2243\nsuccessfulRxPacketsPerSecond: 0.5618328235220675\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:18:11][352469853108646][546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:18:12][352469853108646][968 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=317 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 317.558/317.558/317.558/0.000 ms\n [2025-09-06 13:18:12][352469853108646][968 ms][DEBUG] check_internet: online [2025-09-06 13:18:12][352469853108646][968 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:18:12][352469853108646][968 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853108646\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9847\"}'\'' -e'"" [2025-09-06 13:18:12][352469853108646][968 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:18:12][352469853108646][968 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853108646\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9847\"}'\'' -e'"" [2025-09-06 13:18:17][352469853108646][6013 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fced0d47-f0c7-4cd8-be4c-191c1ef60729","id":"QR_fced0d47-f0c7-4cd8-be4c-191c1ef60729","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:18:17][352469853108646][6169 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-06 13:18:17][352469853108646][6170 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-06 13:18:17][352469853108646][6170 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:18:22][356674231069909][0 ms][INFO] === Request start === [2025-09-06 13:18:22][356674231069909][1 ms][DEBUG] START check_scloud [2025-09-06 13:18:22][356674231069909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:18:23][356674231069909][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 23294 4926 24137164 182088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:18:23][356674231069909][320 ms][DEBUG] targetPkg: running [2025-09-06 13:18:23][356674231069909][320 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 13:18:23][356674231069909][321 ms][DEBUG] START check_boot_completed [2025-09-06 13:18:23][356674231069909][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:18:23][356674231069909][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:18:23][356674231069909][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:18:23][356674231069909][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:18:23][356674231069909][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:18:23][356674231069909][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:18:23][356674231069909][523 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2451\nsuccessfulTxPacketsPerSecond: 0.6209731207349167\nretriedTxPackets: 521\nretriedTxPacketsPerSecond: 0.1642786033690256\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2243\nsuccessfulRxPacketsPerSecond: 0.5618328235220675\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:18:23][356674231069909][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:18:23][356674231069909][930 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.971/306.971/306.971/0.000 ms\n [2025-09-06 13:18:23][356674231069909][930 ms][DEBUG] check_internet: online [2025-09-06 13:18:23][356674231069909][930 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:18:23][356674231069909][930 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356674231069909\",\"model\":\"SM-A356W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9741\"}'\'' -e'"" [2025-09-06 13:18:23][356674231069909][930 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:18:23][356674231069909][930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356674231069909\",\"model\":\"SM-A356W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9741\"}'\'' -e'"" [2025-09-06 13:18:28][356674231069909][5788 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61eb5162-d06a-450a-86e2-c97697c552e7","id":"QR_61eb5162-d06a-450a-86e2-c97697c552e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:18:28][356674231069909][5944 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 13:18:28][356674231069909][5944 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 13:18:28][356674231069909][5944 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:18:32][356674231069909][1 ms][INFO] === Request start === [2025-09-06 13:18:32][356674231069909][1 ms][DEBUG] START check_scloud [2025-09-06 13:18:32][356674231069909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:18:32][356674231069909][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 23294 4926 24311500 193220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:18:32][356674231069909][311 ms][DEBUG] targetPkg: running [2025-09-06 13:18:32][356674231069909][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 13:18:32][356674231069909][311 ms][DEBUG] START check_boot_completed [2025-09-06 13:18:32][356674231069909][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:18:32][356674231069909][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:18:32][356674231069909][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:18:32][356674231069909][451 ms][DEBUG] SU: done in 93 ms; out [2025-09-06 13:18:32][356674231069909][451 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 13:18:32][356674231069909][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:18:32][356674231069909][576 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2451\nsuccessfulTxPacketsPerSecond: 0.6209731207349167\nretriedTxPackets: 521\nretriedTxPacketsPerSecond: 0.1642786033690256\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2243\nsuccessfulRxPacketsPerSecond: 0.5618328235220675\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:18:32][356674231069909][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:18:33][356674231069909][936 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.467/221.467/221.467/0.000 ms\n [2025-09-06 13:18:33][356674231069909][936 ms][DEBUG] check_internet: online [2025-09-06 13:18:33][356674231069909][936 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:18:33][356674231069909][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356674231069909\",\"model\":\"SM-A356W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2891\"}'\'' -e'"" [2025-09-06 13:18:33][356674231069909][936 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:18:33][356674231069909][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356674231069909\",\"model\":\"SM-A356W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2891\"}'\'' -e'"" [2025-09-06 13:18:36][356674231069909][4341 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec66edfc-7f9e-4bfa-8fe1-f01de97bd68b","id":"QR_ec66edfc-7f9e-4bfa-8fe1-f01de97bd68b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:18:36][356674231069909][4497 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-06 13:18:36][356674231069909][4497 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-06 13:18:36][356674231069909][4497 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:19:04][352288962958539][0 ms][INFO] === Request start === [2025-09-06 13:19:04][352288962958539][1 ms][DEBUG] START check_scloud [2025-09-06 13:19:04][352288962958539][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:19:04][352288962958539][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 23294 4926 24416040 205284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:19:04][352288962958539][297 ms][DEBUG] targetPkg: running [2025-09-06 13:19:04][352288962958539][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 13:19:04][352288962958539][297 ms][DEBUG] START check_boot_completed [2025-09-06 13:19:04][352288962958539][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:19:04][352288962958539][328 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 13:19:04][352288962958539][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:19:04][352288962958539][375 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:19:04][352288962958539][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:19:04][352288962958539][375 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:19:04][352288962958539][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962958539\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8106\"}'\'' -e'"" [2025-09-06 13:19:04][352288962958539][375 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:19:04][352288962958539][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962958539\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8106\"}'\'' -e'"" [2025-09-06 13:19:07][352288962958539][3734 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de684056-3c56-48dd-ba15-40f7875fd91c","id":"QR_de684056-3c56-48dd-ba15-40f7875fd91c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:19:08][352288962958539][3890 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=3343 [2025-09-06 13:19:08][352288962958539][3890 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-09-06 13:19:08][352288962958539][3890 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:19:10][352288962958539][0 ms][INFO] === Request start === [2025-09-06 13:19:10][352288962958539][1 ms][DEBUG] START check_scloud [2025-09-06 13:19:10][352288962958539][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:19:10][352288962958539][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 23294 4926 24587184 214380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:19:10][352288962958539][261 ms][DEBUG] targetPkg: running [2025-09-06 13:19:10][352288962958539][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 13:19:10][352288962958539][261 ms][DEBUG] START check_boot_completed [2025-09-06 13:19:10][352288962958539][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:19:10][352288962958539][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:19:10][352288962958539][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:19:10][352288962958539][386 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 13:19:10][352288962958539][386 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 13:19:10][352288962958539][386 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:19:10][352288962958539][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962958539\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5825\"}'\'' -e'"" [2025-09-06 13:19:10][352288962958539][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:19:10][352288962958539][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962958539\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5825\"}'\'' -e'"" [2025-09-06 13:19:15][352288962958539][4916 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57be0718-e0bc-4355-9a09-05f135e4d096","id":"QR_57be0718-e0bc-4355-9a09-05f135e4d096","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:19:15][352288962958539][5072 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-06 13:19:15][352288962958539][5072 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-06 13:19:15][352288962958539][5072 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:22:04][354091573147254][1 ms][INFO] === Request start === [2025-09-06 13:22:04][354091573147254][1 ms][DEBUG] START check_scloud [2025-09-06 13:22:04][354091573147254][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:22:05][354091573147254][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 23294 4926 24692720 167588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:22:05][354091573147254][277 ms][DEBUG] targetPkg: running [2025-09-06 13:22:05][354091573147254][277 ms][DEBUG] END check_scloud in 276 ms [2025-09-06 13:22:05][354091573147254][277 ms][DEBUG] START check_boot_completed [2025-09-06 13:22:05][354091573147254][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:22:05][354091573147254][308 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:22:05][354091573147254][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:22:05][354091573147254][355 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:22:05][354091573147254][355 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:22:05][354091573147254][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:22:05][354091573147254][480 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2560\nsuccessfulTxPacketsPerSecond: 0.9483951240309403\nretriedTxPackets: 549\nretriedTxPacketsPerSecond: 0.24362443553088375\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2335\nsuccessfulRxPacketsPerSecond: 0.8004802881729037\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:22:05][354091573147254][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:22:06][354091573147254][1839 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.209/304.209/304.209/0.000 ms\n [2025-09-06 13:22:06][354091573147254][1839 ms][DEBUG] check_internet: online [2025-09-06 13:22:06][354091573147254][1839 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:22:06][354091573147254][1839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354091573147254\",\"model\":\"SM-M546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1313\"}'\'' -e'"" [2025-09-06 13:22:06][354091573147254][1839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:22:06][354091573147254][1839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354091573147254\",\"model\":\"SM-M546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1313\"}'\'' -e'"" [2025-09-06 13:22:11][354091573147254][6994 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ba611cf-d3b2-497f-81fa-62555dee48df","id":"QR_4ba611cf-d3b2-497f-81fa-62555dee48df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:22:11][354091573147254][7151 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 13:22:11][354091573147254][7151 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 13:22:11][354091573147254][7151 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:22:15][354091573147254][0 ms][INFO] === Request start === [2025-09-06 13:22:15][354091573147254][1 ms][DEBUG] START check_scloud [2025-09-06 13:22:15][354091573147254][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:22:15][354091573147254][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 23294 4926 24847608 178732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:22:15][354091573147254][318 ms][DEBUG] targetPkg: running [2025-09-06 13:22:15][354091573147254][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 13:22:15][354091573147254][318 ms][DEBUG] START check_boot_completed [2025-09-06 13:22:15][354091573147254][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:22:15][354091573147254][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:22:15][354091573147254][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:22:15][354091573147254][443 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 13:22:15][354091573147254][443 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 13:22:15][354091573147254][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:22:15][354091573147254][553 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30278 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2560\nsuccessfulTxPacketsPerSecond: 0.9483951240309403\nretriedTxPackets: 549\nretriedTxPacketsPerSecond: 0.24362443553088375\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2335\nsuccessfulRxPacketsPerSecond: 0.8004802881729037\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:22:15][354091573147254][553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:22:16][354091573147254][1005 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=346 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 346.614/346.614/346.614/0.000 ms\n [2025-09-06 13:22:16][354091573147254][1006 ms][DEBUG] check_internet: online [2025-09-06 13:22:16][354091573147254][1006 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:22:16][354091573147254][1006 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354091573147254\",\"model\":\"SM-M546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1054\"}'\'' -e'"" [2025-09-06 13:22:16][354091573147254][1006 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:22:16][354091573147254][1006 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354091573147254\",\"model\":\"SM-M546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1054\"}'\'' -e'"" [2025-09-06 13:22:20][354091573147254][4802 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 13:22:20][354091573147254][4802 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-09-06 13:22:20][354091573147254][4802 ms][WARN] Detected error: Process with pid 23294 either refused to load frida-agent, or terminated during injectionProcess with pid 23294 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 13:22:20][354091573147254][4802 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 13:22:20][354091573147254][5098 ms][DEBUG] SU: done in 296 ms; outsystem 5341 4926 12600300 198848 ep_poll 0 S system_server\nsystem 25757 1 12399676 119300 ptrace_stop 0 t system_server\n [2025-09-06 13:22:20][354091573147254][5098 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 13:22:20][354091573147254][5239 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 13:22:20][354091573147254][5239 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 13:22:20][354091573147254][5239 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 13:22:20][354091573147254][5364 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 13:22:20][354091573147254][5364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 13:22:20][354091573147254][5536 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 13:22:22][354091573147254][7551 ms][DEBUG] START check_boot_completed [2025-09-06 13:22:22][354091573147254][7551 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:22:23][354091573147254][7598 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:22:23][354091573147254][7598 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:22:23][354091573147254][7644 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:22:23][354091573147254][7645 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 13:22:26][354091573147254][10659 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 13:22:26][354091573147254][10659 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354091573147254\",\"model\":\"SM-M546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1054\"}'\'' -e'"" [2025-09-06 13:22:26][354091573147254][11238 ms][DEBUG] proc_open done in 578 ms (timeout); code=4; out.len=0 err.len=50 [2025-09-06 13:22:26][354091573147254][11238 ms][DEBUG] END runCmdUntilRes#2 in 578 ms [2025-09-06 13:22:26][354091573147254][11238 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-09-06 13:22:26][354091573147254][11238 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 13:22:26][354091573147254][11519 ms][DEBUG] SU: done in 281 ms; out [2025-09-06 13:23:03][356908781178201][1 ms][INFO] === Request start === [2025-09-06 13:23:03][356908781178201][1 ms][DEBUG] START check_scloud [2025-09-06 13:23:03][356908781178201][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:23:04][356908781178201][430 ms][DEBUG] SU: done in 429 ms; out [2025-09-06 13:23:04][356908781178201][430 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 13:23:04][356908781178201][461 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 13:23:04][356908781178201][461 ms][DEBUG] check_devices: device found [2025-09-06 13:23:04][356908781178201][461 ms][WARN] targetPkg: not running, restarting [2025-09-06 13:23:04][356908781178201][461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 13:23:04][356908781178201][680 ms][DEBUG] SU: done in 219 ms; out [2025-09-06 13:23:04][356908781178201][680 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 13:23:05][356908781178201][1117 ms][DEBUG] SU: done in 437 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 13:23:07][356908781178201][3132 ms][DEBUG] END check_scloud in 3131 ms [2025-09-06 13:23:07][356908781178201][3132 ms][DEBUG] START check_boot_completed [2025-09-06 13:23:07][356908781178201][3132 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:23:07][356908781178201][3179 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:23:07][356908781178201][3179 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:23:07][356908781178201][3242 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 13:23:07][356908781178201][3242 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 13:23:07][356908781178201][3242 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:23:07][356908781178201][3242 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908781178201\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6026\"}'\'' -e'"" [2025-09-06 13:23:07][356908781178201][3242 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:23:07][356908781178201][3242 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908781178201\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6026\"}'\'' -e'"" [2025-09-06 13:23:15][356908781178201][11099 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f024857-3b08-4a6e-a19a-cd55fe3f4846","id":"QR_7f024857-3b08-4a6e-a19a-cd55fe3f4846","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:23:15][356908781178201][11255 ms][DEBUG] proc_open done in 8013 ms; code=255; res.len=3343 [2025-09-06 13:23:15][356908781178201][11255 ms][DEBUG] END runCmdUntilRes#1 in 8013 ms [2025-09-06 13:23:15][356908781178201][11256 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:23:17][356908781178201][0 ms][INFO] === Request start === [2025-09-06 13:23:17][356908781178201][1 ms][DEBUG] START check_scloud [2025-09-06 13:23:17][356908781178201][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:23:17][356908781178201][361 ms][DEBUG] SU: done in 360 ms; outu0_a118 29110 25938 23758448 116420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:23:17][356908781178201][361 ms][DEBUG] targetPkg: running [2025-09-06 13:23:17][356908781178201][361 ms][DEBUG] END check_scloud in 360 ms [2025-09-06 13:23:17][356908781178201][361 ms][DEBUG] START check_boot_completed [2025-09-06 13:23:17][356908781178201][361 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:23:17][356908781178201][408 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:23:17][356908781178201][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:23:18][356908781178201][470 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:23:18][356908781178201][470 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:23:18][356908781178201][470 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:23:18][356908781178201][470 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908781178201\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4783\"}'\'' -e'"" [2025-09-06 13:23:18][356908781178201][470 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:23:18][356908781178201][470 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908781178201\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4783\"}'\'' -e'"" [2025-09-06 13:23:23][356908781178201][6219 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1fd08ff-6cac-4052-919f-41afab2e80e8","id":"QR_e1fd08ff-6cac-4052-919f-41afab2e80e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:23:23][356908781178201][6375 ms][DEBUG] proc_open done in 5904 ms; code=255; res.len=3343 [2025-09-06 13:23:23][356908781178201][6375 ms][DEBUG] END runCmdUntilRes#1 in 5905 ms [2025-09-06 13:23:23][356908781178201][6375 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:23:29][357651714283784][0 ms][INFO] === Request start === [2025-09-06 13:23:29][357651714283784][1 ms][DEBUG] START check_scloud [2025-09-06 13:23:29][357651714283784][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:23:29][357651714283784][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 29110 25938 23945396 95756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:23:29][357651714283784][309 ms][DEBUG] targetPkg: running [2025-09-06 13:23:29][357651714283784][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 13:23:29][357651714283784][309 ms][DEBUG] START check_boot_completed [2025-09-06 13:23:29][357651714283784][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:23:29][357651714283784][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:23:29][357651714283784][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:23:29][357651714283784][418 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 13:23:29][357651714283784][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:23:29][357651714283784][418 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:23:29][357651714283784][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651714283784\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2009\"}'\'' -e'"" [2025-09-06 13:23:29][357651714283784][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:23:29][357651714283784][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651714283784\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2009\"}'\'' -e'"" [2025-09-06 13:23:34][357651714283784][5573 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_90a7f11c-9405-4d90-a9cc-e52ef8a24eb1","id":"QR_90a7f11c-9405-4d90-a9cc-e52ef8a24eb1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:23:35][357651714283784][5729 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-06 13:23:35][357651714283784][5729 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 13:23:35][357651714283784][5729 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:23:38][357651714283784][0 ms][INFO] === Request start === [2025-09-06 13:23:38][357651714283784][1 ms][DEBUG] START check_scloud [2025-09-06 13:23:38][357651714283784][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:23:38][357651714283784][346 ms][DEBUG] SU: done in 345 ms; outu0_a118 29110 25938 24021956 91804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:23:38][357651714283784][346 ms][DEBUG] targetPkg: running [2025-09-06 13:23:38][357651714283784][346 ms][DEBUG] END check_scloud in 345 ms [2025-09-06 13:23:38][357651714283784][346 ms][DEBUG] START check_boot_completed [2025-09-06 13:23:38][357651714283784][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:23:38][357651714283784][393 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:23:38][357651714283784][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:23:39][357651714283784][455 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:23:39][357651714283784][455 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:23:39][357651714283784][455 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:23:39][357651714283784][455 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651714283784\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9930\"}'\'' -e'"" [2025-09-06 13:23:39][357651714283784][455 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:23:39][357651714283784][455 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651714283784\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9930\"}'\'' -e'"" [2025-09-06 13:23:43][357651714283784][5235 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1301773-4474-4e09-a12b-60a5ab9f60fc","id":"QR_d1301773-4474-4e09-a12b-60a5ab9f60fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:23:43][357651714283784][5391 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-06 13:23:43][357651714283784][5392 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-06 13:23:43][357651714283784][5392 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:25:03][353204334437606][0 ms][INFO] === Request start === [2025-09-06 13:25:03][353204334437606][0 ms][DEBUG] START check_scloud [2025-09-06 13:25:03][353204334437606][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:25:03][353204334437606][346 ms][DEBUG] SU: done in 346 ms; outu0_a118 29110 25938 24139872 65128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:25:03][353204334437606][346 ms][DEBUG] targetPkg: running [2025-09-06 13:25:03][353204334437606][346 ms][DEBUG] END check_scloud in 346 ms [2025-09-06 13:25:03][353204334437606][346 ms][DEBUG] START check_boot_completed [2025-09-06 13:25:03][353204334437606][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:25:03][353204334437606][392 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:25:03][353204334437606][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:25:03][353204334437606][439 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:25:03][353204334437606][439 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:25:03][353204334437606][439 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:25:03][353204334437606][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204334437606\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9946\"}'\'' -e'"" [2025-09-06 13:25:03][353204334437606][439 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:25:03][353204334437606][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204334437606\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9946\"}'\'' -e'"" [2025-09-06 13:25:08][353204334437606][5704 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2c056ac-6154-4abd-9b71-13718073df29","id":"QR_a2c056ac-6154-4abd-9b71-13718073df29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:25:09][353204334437606][5860 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 13:25:09][353204334437606][5860 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-09-06 13:25:09][353204334437606][5860 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:25:11][353204334437606][1 ms][INFO] === Request start === [2025-09-06 13:25:11][353204334437606][1 ms][DEBUG] START check_scloud [2025-09-06 13:25:11][353204334437606][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:25:11][353204334437606][335 ms][DEBUG] SU: done in 334 ms; outu0_a118 29110 25938 24277276 86988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:25:11][353204334437606][335 ms][DEBUG] targetPkg: running [2025-09-06 13:25:11][353204334437606][335 ms][DEBUG] END check_scloud in 334 ms [2025-09-06 13:25:11][353204334437606][335 ms][DEBUG] START check_boot_completed [2025-09-06 13:25:11][353204334437606][335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:25:11][353204334437606][380 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 13:25:11][353204334437606][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:25:11][353204334437606][427 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:25:11][353204334437606][427 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 13:25:11][353204334437606][427 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:25:11][353204334437606][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204334437606\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3579\"}'\'' -e'"" [2025-09-06 13:25:11][353204334437606][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:25:11][353204334437606][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204334437606\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3579\"}'\'' -e'"" [2025-09-06 13:25:17][353204334437606][5691 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5c03c81-b7cf-491c-baa5-7349d8417b58","id":"QR_e5c03c81-b7cf-491c-baa5-7349d8417b58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:25:17][353204334437606][5847 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 13:25:17][353204334437606][5847 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-09-06 13:25:17][353204334437606][5847 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:25:21][351064279793526][0 ms][INFO] === Request start === [2025-09-06 13:25:21][351064279793526][0 ms][DEBUG] START check_scloud [2025-09-06 13:25:21][351064279793526][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:25:21][351064279793526][324 ms][DEBUG] SU: done in 324 ms; outu0_a118 29110 25938 24434212 99236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:25:21][351064279793526][324 ms][DEBUG] targetPkg: running [2025-09-06 13:25:21][351064279793526][324 ms][DEBUG] END check_scloud in 324 ms [2025-09-06 13:25:21][351064279793526][324 ms][DEBUG] START check_boot_completed [2025-09-06 13:25:21][351064279793526][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:25:21][351064279793526][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:25:21][351064279793526][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:25:21][351064279793526][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:25:21][351064279793526][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:25:21][351064279793526][418 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:25:21][351064279793526][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064279793526\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7684\"}'\'' -e'"" [2025-09-06 13:25:21][351064279793526][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:25:21][351064279793526][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064279793526\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7684\"}'\'' -e'"" [2025-09-06 13:25:25][351064279793526][3932 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6f5ab72-5e1b-4300-b8d9-89e908c2f94b","id":"QR_d6f5ab72-5e1b-4300-b8d9-89e908c2f94b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:25:25][351064279793526][4089 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-09-06 13:25:25][351064279793526][4089 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-06 13:25:25][351064279793526][4089 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:25:27][351064279793526][0 ms][INFO] === Request start === [2025-09-06 13:25:27][351064279793526][1 ms][DEBUG] START check_scloud [2025-09-06 13:25:27][351064279793526][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:25:28][351064279793526][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 29110 25938 24550152 110672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:25:28][351064279793526][325 ms][DEBUG] targetPkg: running [2025-09-06 13:25:28][351064279793526][325 ms][DEBUG] END check_scloud in 324 ms [2025-09-06 13:25:28][351064279793526][325 ms][DEBUG] START check_boot_completed [2025-09-06 13:25:28][351064279793526][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:25:28][351064279793526][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:25:28][351064279793526][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:25:28][351064279793526][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:25:28][351064279793526][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:25:28][351064279793526][418 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:25:28][351064279793526][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064279793526\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7391\"}'\'' -e'"" [2025-09-06 13:25:28][351064279793526][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:25:28][351064279793526][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064279793526\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7391\"}'\'' -e'"" [2025-09-06 13:25:32][351064279793526][4792 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a14f45a4-5991-4d31-b2ab-306fc7d3e560","id":"QR_a14f45a4-5991-4d31-b2ab-306fc7d3e560","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:25:32][351064279793526][4948 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-09-06 13:25:32][351064279793526][4948 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-06 13:25:32][351064279793526][4948 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:26:04][358586352445965][0 ms][INFO] === Request start === [2025-09-06 13:26:04][358586352445965][1 ms][DEBUG] START check_scloud [2025-09-06 13:26:04][358586352445965][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:26:05][358586352445965][262 ms][DEBUG] SU: done in 262 ms; outu0_a118 29110 25938 24633188 121884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:26:05][358586352445965][262 ms][DEBUG] targetPkg: running [2025-09-06 13:26:05][358586352445965][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-06 13:26:05][358586352445965][263 ms][DEBUG] START check_boot_completed [2025-09-06 13:26:05][358586352445965][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:26:05][358586352445965][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:26:05][358586352445965][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:26:05][358586352445965][356 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 13:26:05][358586352445965][356 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 13:26:05][358586352445965][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:26:05][358586352445965][480 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 721\nsuccessfulTxPacketsPerSecond: 6.1296958041654594\nretriedTxPackets: 97\nretriedTxPacketsPerSecond: 1.2311033827370395\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 774\nsuccessfulRxPacketsPerSecond: 5.718048605811546\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:26:05][358586352445965][480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:26:06][358586352445965][2089 ms][DEBUG] SU: done in 1609 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.973/291.973/291.973/0.000 ms\n [2025-09-06 13:26:06][358586352445965][2089 ms][DEBUG] check_internet: online [2025-09-06 13:26:06][358586352445965][2090 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:26:06][358586352445965][2090 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358586352445965\",\"model\":\"SM-A526W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3747\"}'\'' -e'"" [2025-09-06 13:26:06][358586352445965][2090 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:26:06][358586352445965][2090 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358586352445965\",\"model\":\"SM-A526W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3747\"}'\'' -e'"" [2025-09-06 13:26:11][358586352445965][6916 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92bc81a0-8c90-4fcf-9b2a-873a4fdcbb4f","id":"QR_92bc81a0-8c90-4fcf-9b2a-873a4fdcbb4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:26:11][358586352445965][7072 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-09-06 13:26:11][358586352445965][7072 ms][DEBUG] END runCmdUntilRes#1 in 4982 ms [2025-09-06 13:26:11][358586352445965][7072 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:26:15][358586352445965][0 ms][INFO] === Request start === [2025-09-06 13:26:15][358586352445965][1 ms][DEBUG] START check_scloud [2025-09-06 13:26:15][358586352445965][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:26:15][358586352445965][284 ms][DEBUG] SU: done in 284 ms; outu0_a118 29110 25938 24786028 133872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:26:15][358586352445965][285 ms][DEBUG] targetPkg: running [2025-09-06 13:26:15][358586352445965][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-06 13:26:15][358586352445965][285 ms][DEBUG] START check_boot_completed [2025-09-06 13:26:15][358586352445965][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:26:15][358586352445965][331 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:26:15][358586352445965][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:26:15][358586352445965][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:26:15][358586352445965][378 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:26:15][358586352445965][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:26:15][358586352445965][488 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 721\nsuccessfulTxPacketsPerSecond: 6.1296958041654594\nretriedTxPackets: 97\nretriedTxPacketsPerSecond: 1.2311033827370395\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 774\nsuccessfulRxPacketsPerSecond: 5.718048605811546\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:26:15][358586352445965][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:26:16][358586352445965][956 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.156/318.156/318.156/0.000 ms\n [2025-09-06 13:26:16][358586352445965][956 ms][DEBUG] check_internet: online [2025-09-06 13:26:16][358586352445965][956 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:26:16][358586352445965][956 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358586352445965\",\"model\":\"SM-A526W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4658\"}'\'' -e'"" [2025-09-06 13:26:16][358586352445965][957 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:26:16][358586352445965][957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358586352445965\",\"model\":\"SM-A526W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4658\"}'\'' -e'"" [2025-09-06 13:26:20][358586352445965][4971 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57ee4997-d226-4077-81d9-5c6ebfe9462b","id":"QR_57ee4997-d226-4077-81d9-5c6ebfe9462b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:26:20][358586352445965][5127 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-09-06 13:26:20][358586352445965][5127 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-09-06 13:26:20][358586352445965][5127 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:29:04][354626227081266][1 ms][INFO] === Request start === [2025-09-06 13:29:04][354626227081266][1 ms][DEBUG] START check_scloud [2025-09-06 13:29:04][354626227081266][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:29:04][354626227081266][254 ms][DEBUG] SU: done in 252 ms; outu0_a118 29110 25938 24886052 142412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:29:04][354626227081266][254 ms][DEBUG] targetPkg: running [2025-09-06 13:29:04][354626227081266][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 13:29:04][354626227081266][254 ms][DEBUG] START check_boot_completed [2025-09-06 13:29:04][354626227081266][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:29:04][354626227081266][285 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:29:04][354626227081266][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:29:04][354626227081266][331 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:29:04][354626227081266][331 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:29:04][354626227081266][331 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:29:04][354626227081266][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626227081266\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1327\"}'\'' -e'"" [2025-09-06 13:29:04][354626227081266][331 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:29:04][354626227081266][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626227081266\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1327\"}'\'' -e'"" [2025-09-06 13:29:08][354626227081266][4393 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_978e94c4-999d-49fc-9409-3fd51ef16151","id":"QR_978e94c4-999d-49fc-9409-3fd51ef16151","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:29:08][354626227081266][4549 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-09-06 13:29:08][354626227081266][4549 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-09-06 13:29:08][354626227081266][4549 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:29:10][354626227081266][0 ms][INFO] === Request start === [2025-09-06 13:29:10][354626227081266][1 ms][DEBUG] START check_scloud [2025-09-06 13:29:10][354626227081266][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:29:11][354626227081266][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 29110 25938 25059248 153616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:29:11][354626227081266][265 ms][DEBUG] targetPkg: running [2025-09-06 13:29:11][354626227081266][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-06 13:29:11][354626227081266][265 ms][DEBUG] START check_boot_completed [2025-09-06 13:29:11][354626227081266][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:29:11][354626227081266][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:29:11][354626227081266][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:29:11][354626227081266][374 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:29:11][354626227081266][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:29:11][354626227081266][374 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:29:11][354626227081266][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626227081266\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4529\"}'\'' -e'"" [2025-09-06 13:29:11][354626227081266][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:29:11][354626227081266][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626227081266\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4529\"}'\'' -e'"" [2025-09-06 13:29:15][354626227081266][4748 ms][DEBUG] proc_open done in 4374 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 13:29:15][354626227081266][4748 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-09-06 13:29:15][354626227081266][4748 ms][WARN] Detected error: Process with pid 29110 either refused to load frida-agent, or terminated during injectionProcess with pid 29110 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 13:29:15][354626227081266][4748 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 13:29:15][354626227081266][5045 ms][DEBUG] SU: done in 296 ms; outsystem 26276 25938 13362748 576308 ep_poll 0 S system_server\n [2025-09-06 13:29:15][354626227081266][5045 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 13:29:16][354626227081266][5185 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 13:29:16][354626227081266][5185 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 13:29:16][354626227081266][5185 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 13:29:16][354626227081266][5326 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 13:29:16][354626227081266][5326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 13:29:16][354626227081266][5529 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 13:29:18][354626227081266][7544 ms][DEBUG] START check_boot_completed [2025-09-06 13:29:18][354626227081266][7544 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:29:18][354626227081266][7575 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:29:18][354626227081266][7575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:29:18][354626227081266][7623 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 13:29:18][354626227081266][7623 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 13:29:21][354626227081266][10637 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 13:29:21][354626227081266][10637 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626227081266\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4529\"}'\'' -e'"" [2025-09-06 13:29:26][354626227081266][15448 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89072782-5c8e-466b-b16e-ca835f5a50e5","id":"QR_89072782-5c8e-466b-b16e-ca835f5a50e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:29:26][354626227081266][15604 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-06 13:29:26][354626227081266][15605 ms][DEBUG] END runCmdUntilRes#2 in 4968 ms [2025-09-06 13:29:26][354626227081266][15605 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:29:31][352177394639017][0 ms][INFO] === Request start === [2025-09-06 13:29:31][352177394639017][1 ms][DEBUG] START check_scloud [2025-09-06 13:29:31][352177394639017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:29:32][352177394639017][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 7666 25938 23757912 125356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:29:32][352177394639017][252 ms][DEBUG] targetPkg: running [2025-09-06 13:29:32][352177394639017][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-06 13:29:32][352177394639017][252 ms][DEBUG] START check_boot_completed [2025-09-06 13:29:32][352177394639017][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:29:32][352177394639017][299 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:29:32][352177394639017][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:29:32][352177394639017][361 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:29:32][352177394639017][361 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:29:32][352177394639017][361 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:29:32][352177394639017][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177394639017\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6478\"}'\'' -e'"" [2025-09-06 13:29:32][352177394639017][361 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:29:32][352177394639017][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177394639017\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6478\"}'\'' -e'"" [2025-09-06 13:29:36][352177394639017][5001 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0867386-296f-4884-a3e4-fd3614721808","id":"QR_e0867386-296f-4884-a3e4-fd3614721808","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:29:37][352177394639017][5157 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 13:29:37][352177394639017][5157 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-06 13:29:37][352177394639017][5157 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:29:40][352177394639017][0 ms][INFO] === Request start === [2025-09-06 13:29:40][352177394639017][1 ms][DEBUG] START check_scloud [2025-09-06 13:29:40][352177394639017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:29:40][352177394639017][248 ms][DEBUG] SU: done in 248 ms; outu0_a118 7666 25938 23940332 138804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:29:40][352177394639017][249 ms][DEBUG] targetPkg: running [2025-09-06 13:29:40][352177394639017][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-06 13:29:40][352177394639017][249 ms][DEBUG] START check_boot_completed [2025-09-06 13:29:40][352177394639017][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:29:41][352177394639017][295 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:29:41][352177394639017][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:29:41][352177394639017][358 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:29:41][352177394639017][358 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:29:41][352177394639017][358 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:29:41][352177394639017][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177394639017\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6173\"}'\'' -e'"" [2025-09-06 13:29:41][352177394639017][358 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:29:41][352177394639017][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177394639017\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6173\"}'\'' -e'"" [2025-09-06 13:29:44][352177394639017][3841 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5901a301-6f60-4d60-abe8-1445770c8e3e","id":"QR_5901a301-6f60-4d60-abe8-1445770c8e3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:29:44][352177394639017][3997 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-09-06 13:29:44][352177394639017][3997 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-06 13:29:44][352177394639017][3997 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:31:03][356413251732306][0 ms][INFO] === Request start === [2025-09-06 13:31:03][356413251732306][1 ms][DEBUG] START check_scloud [2025-09-06 13:31:03][356413251732306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:31:03][356413251732306][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 7666 25938 23941080 150584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:31:03][356413251732306][314 ms][DEBUG] targetPkg: running [2025-09-06 13:31:03][356413251732306][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 13:31:03][356413251732306][314 ms][DEBUG] START check_boot_completed [2025-09-06 13:31:03][356413251732306][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:31:03][356413251732306][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:31:03][356413251732306][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:31:03][356413251732306][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:31:03][356413251732306][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:31:03][356413251732306][392 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:31:03][356413251732306][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356413251732306\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7608\"}'\'' -e'"" [2025-09-06 13:31:03][356413251732306][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:31:03][356413251732306][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356413251732306\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7608\"}'\'' -e'"" [2025-09-06 13:31:08][356413251732306][5344 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa19c08e-4233-42f1-b8f0-99aa075122b6","id":"QR_fa19c08e-4233-42f1-b8f0-99aa075122b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:31:08][356413251732306][5500 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 13:31:08][356413251732306][5500 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 13:31:08][356413251732306][5500 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:31:11][356413251732306][1 ms][INFO] === Request start === [2025-09-06 13:31:11][356413251732306][1 ms][DEBUG] START check_scloud [2025-09-06 13:31:11][356413251732306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:31:11][356413251732306][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 7666 25938 24085728 161684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:31:11][356413251732306][307 ms][DEBUG] targetPkg: running [2025-09-06 13:31:11][356413251732306][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 13:31:11][356413251732306][307 ms][DEBUG] START check_boot_completed [2025-09-06 13:31:11][356413251732306][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:31:11][356413251732306][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:31:11][356413251732306][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:31:11][356413251732306][385 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:31:11][356413251732306][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:31:11][356413251732306][385 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:31:11][356413251732306][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356413251732306\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7633\"}'\'' -e'"" [2025-09-06 13:31:11][356413251732306][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:31:11][356413251732306][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356413251732306\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7633\"}'\'' -e'"" [2025-09-06 13:31:16][356413251732306][5259 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_acfb9da7-7999-47ea-9c4a-db9bc2ddeecc","id":"QR_acfb9da7-7999-47ea-9c4a-db9bc2ddeecc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:31:16][356413251732306][5415 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-06 13:31:16][356413251732306][5415 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-06 13:31:16][356413251732306][5415 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:34:03][350013881646466][1 ms][INFO] === Request start === [2025-09-06 13:34:03][350013881646466][1 ms][DEBUG] START check_scloud [2025-09-06 13:34:03][350013881646466][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:34:04][350013881646466][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 7666 25938 24195412 172920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:34:04][350013881646466][308 ms][DEBUG] targetPkg: running [2025-09-06 13:34:04][350013881646466][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 13:34:04][350013881646466][308 ms][DEBUG] START check_boot_completed [2025-09-06 13:34:04][350013881646466][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:34:04][350013881646466][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:34:04][350013881646466][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:34:04][350013881646466][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:34:04][350013881646466][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:34:04][350013881646466][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:34:04][350013881646466][511 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1290\nsuccessfulTxPacketsPerSecond: 0.8169771844176547\nretriedTxPackets: 232\nretriedTxPacketsPerSecond: 0.2092258643020823\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1267\nsuccessfulRxPacketsPerSecond: 0.6808143203480456\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:34:04][350013881646466][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:34:05][350013881646466][1933 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.080/301.080/301.080/0.000 ms\n [2025-09-06 13:34:05][350013881646466][1933 ms][DEBUG] check_internet: online [2025-09-06 13:34:05][350013881646466][1933 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:34:05][350013881646466][1933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881646466\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9685\"}'\'' -e'"" [2025-09-06 13:34:05][350013881646466][1933 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:34:05][350013881646466][1933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881646466\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9685\"}'\'' -e'"" [2025-09-06 13:34:09][350013881646466][5869 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db2e8454-53e8-4e38-9c32-7ea367e38744","id":"QR_db2e8454-53e8-4e38-9c32-7ea367e38744","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:34:09][350013881646466][6025 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-09-06 13:34:09][350013881646466][6025 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-06 13:34:09][350013881646466][6025 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:34:12][350013881646466][0 ms][INFO] === Request start === [2025-09-06 13:34:12][350013881646466][1 ms][DEBUG] START check_scloud [2025-09-06 13:34:12][350013881646466][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:34:12][350013881646466][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 7666 25938 24327772 184832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:34:12][350013881646466][317 ms][DEBUG] targetPkg: running [2025-09-06 13:34:12][350013881646466][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 13:34:12][350013881646466][317 ms][DEBUG] START check_boot_completed [2025-09-06 13:34:12][350013881646466][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:34:12][350013881646466][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:34:12][350013881646466][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:34:12][350013881646466][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:34:12][350013881646466][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:34:12][350013881646466][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:34:12][350013881646466][552 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1290\nsuccessfulTxPacketsPerSecond: 0.8169771844176547\nretriedTxPackets: 232\nretriedTxPacketsPerSecond: 0.2092258643020823\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1267\nsuccessfulRxPacketsPerSecond: 0.6808143203480456\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:34:12][350013881646466][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:34:13][350013881646466][958 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.777/260.777/260.777/0.000 ms\n [2025-09-06 13:34:13][350013881646466][958 ms][DEBUG] check_internet: online [2025-09-06 13:34:13][350013881646466][958 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:34:13][350013881646466][958 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881646466\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8674\"}'\'' -e'"" [2025-09-06 13:34:13][350013881646466][958 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:34:13][350013881646466][958 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881646466\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8674\"}'\'' -e'"" [2025-09-06 13:34:18][350013881646466][6128 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24dd8e58-56a9-4b63-b963-b4ba821dbd61","id":"QR_24dd8e58-56a9-4b63-b963-b4ba821dbd61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:34:18][350013881646466][6284 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-09-06 13:34:18][350013881646466][6284 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-09-06 13:34:18][350013881646466][6284 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:35:05][359259106212789][0 ms][INFO] === Request start === [2025-09-06 13:35:05][359259106212789][1 ms][DEBUG] START check_scloud [2025-09-06 13:35:05][359259106212789][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:35:05][359259106212789][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 7666 25938 24468124 195656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:35:05][359259106212789][310 ms][DEBUG] targetPkg: running [2025-09-06 13:35:05][359259106212789][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 13:35:05][359259106212789][310 ms][DEBUG] START check_boot_completed [2025-09-06 13:35:05][359259106212789][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:35:05][359259106212789][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:35:05][359259106212789][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:35:05][359259106212789][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:35:05][359259106212789][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:35:05][359259106212789][388 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:35:05][359259106212789][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259106212789\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3582\"}'\'' -e'"" [2025-09-06 13:35:05][359259106212789][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:35:05][359259106212789][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259106212789\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3582\"}'\'' -e'"" [2025-09-06 13:35:10][359259106212789][5293 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ae482b7-a03c-4029-b7b3-35927f6f1aab","id":"QR_2ae482b7-a03c-4029-b7b3-35927f6f1aab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:35:10][359259106212789][5449 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-09-06 13:35:10][359259106212789][5449 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-09-06 13:35:10][359259106212789][5449 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:35:14][359259106212789][0 ms][INFO] === Request start === [2025-09-06 13:35:14][359259106212789][1 ms][DEBUG] START check_scloud [2025-09-06 13:35:14][359259106212789][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:35:14][359259106212789][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 7666 25938 24602532 207544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:35:14][359259106212789][302 ms][DEBUG] targetPkg: running [2025-09-06 13:35:14][359259106212789][302 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 13:35:14][359259106212789][303 ms][DEBUG] START check_boot_completed [2025-09-06 13:35:14][359259106212789][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:35:14][359259106212789][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:35:14][359259106212789][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:35:14][359259106212789][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:35:14][359259106212789][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 13:35:14][359259106212789][397 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:35:14][359259106212789][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259106212789\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3106\"}'\'' -e'"" [2025-09-06 13:35:14][359259106212789][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:35:14][359259106212789][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259106212789\",\"model\":\"SM-N975F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3106\"}'\'' -e'"" [2025-09-06 13:35:19][359259106212789][4848 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4e45507-c4fb-43cb-ad27-6e4f9ca4fb56","id":"QR_b4e45507-c4fb-43cb-ad27-6e4f9ca4fb56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:35:19][359259106212789][5004 ms][DEBUG] proc_open done in 4607 ms; code=255; res.len=3343 [2025-09-06 13:35:19][359259106212789][5004 ms][DEBUG] END runCmdUntilRes#1 in 4607 ms [2025-09-06 13:35:19][359259106212789][5004 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:35:21][358649972242871][0 ms][INFO] === Request start === [2025-09-06 13:35:21][358649972242871][1 ms][DEBUG] START check_scloud [2025-09-06 13:35:21][358649972242871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:35:21][358649972242871][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 7666 25938 24784044 218400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:35:21][358649972242871][284 ms][DEBUG] targetPkg: running [2025-09-06 13:35:21][358649972242871][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-06 13:35:21][358649972242871][284 ms][DEBUG] START check_boot_completed [2025-09-06 13:35:21][358649972242871][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:35:21][358649972242871][330 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:35:21][358649972242871][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:35:21][358649972242871][393 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 13:35:21][358649972242871][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:35:21][358649972242871][393 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:35:21][358649972242871][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358649972242871\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4420\"}'\'' -e'"" [2025-09-06 13:35:21][358649972242871][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:35:21][358649972242871][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358649972242871\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4420\"}'\'' -e'"" [2025-09-06 13:35:24][358649972242871][3876 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea50ce8a-6408-47b7-a7c9-6d7e766881e0","id":"QR_ea50ce8a-6408-47b7-a7c9-6d7e766881e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:35:25][358649972242871][4032 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-06 13:35:25][358649972242871][4032 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-06 13:35:25][358649972242871][4033 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:35:27][358649972242871][0 ms][INFO] === Request start === [2025-09-06 13:35:27][358649972242871][1 ms][DEBUG] START check_scloud [2025-09-06 13:35:27][358649972242871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:35:27][358649972242871][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 7666 25938 24942992 230436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:35:27][358649972242871][297 ms][DEBUG] targetPkg: running [2025-09-06 13:35:27][358649972242871][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 13:35:27][358649972242871][297 ms][DEBUG] START check_boot_completed [2025-09-06 13:35:27][358649972242871][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:35:27][358649972242871][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:35:27][358649972242871][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:35:27][358649972242871][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:35:27][358649972242871][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:35:27][358649972242871][390 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:35:27][358649972242871][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358649972242871\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5088\"}'\'' -e'"" [2025-09-06 13:35:27][358649972242871][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:35:27][358649972242871][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358649972242871\",\"model\":\"SM-A236E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5088\"}'\'' -e'"" [2025-09-06 13:35:33][358649972242871][5545 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_520a35a4-2435-4849-983c-b0059240720f","id":"QR_520a35a4-2435-4849-983c-b0059240720f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:35:33][358649972242871][5702 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 13:35:33][358649972242871][5702 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 13:35:33][358649972242871][5702 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:38:03][352539592439716][1 ms][INFO] === Request start === [2025-09-06 13:38:03][352539592439716][1 ms][DEBUG] START check_scloud [2025-09-06 13:38:03][352539592439716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:38:04][352539592439716][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 7666 25938 25019948 241748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:38:04][352539592439716][295 ms][DEBUG] targetPkg: running [2025-09-06 13:38:04][352539592439716][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 13:38:04][352539592439716][295 ms][DEBUG] START check_boot_completed [2025-09-06 13:38:04][352539592439716][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:38:04][352539592439716][326 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:38:04][352539592439716][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:38:04][352539592439716][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 13:38:04][352539592439716][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 13:38:04][352539592439716][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:38:04][352539592439716][498 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1290\nsuccessfulTxPacketsPerSecond: 0.8169771844176547\nretriedTxPackets: 232\nretriedTxPacketsPerSecond: 0.2092258643020823\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1267\nsuccessfulRxPacketsPerSecond: 0.6808143203480456\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:38:04][352539592439716][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:38:04][352539592439716][857 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=262 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 262.084/262.084/262.084/0.000 ms\n [2025-09-06 13:38:04][352539592439716][858 ms][DEBUG] check_internet: online [2025-09-06 13:38:04][352539592439716][858 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:38:04][352539592439716][858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539592439716\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4633\"}'\'' -e'"" [2025-09-06 13:38:04][352539592439716][858 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:38:04][352539592439716][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539592439716\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4633\"}'\'' -e'"" [2025-09-06 13:38:08][352539592439716][4841 ms][DEBUG] proc_open done in 3983 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 13:38:08][352539592439716][4841 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-06 13:38:08][352539592439716][4841 ms][WARN] Detected error: Process with pid 7666 either refused to load frida-agent, or terminated during injectionProcess with pid 7666 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 13:38:08][352539592439716][4841 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 13:38:09][352539592439716][5153 ms][DEBUG] SU: done in 312 ms; outsystem 26276 25938 13011392 248900 ep_poll 0 S system_server\n [2025-09-06 13:38:09][352539592439716][5153 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 13:38:09][352539592439716][5294 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 13:38:09][352539592439716][5294 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 13:38:09][352539592439716][5294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 13:38:09][352539592439716][5434 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 13:38:09][352539592439716][5435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 13:38:09][352539592439716][5622 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 13:38:11][352539592439716][7637 ms][DEBUG] START check_boot_completed [2025-09-06 13:38:11][352539592439716][7637 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:38:11][352539592439716][7684 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:38:11][352539592439716][7684 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:38:11][352539592439716][7731 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:38:11][352539592439716][7731 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 13:38:14][352539592439716][10745 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 13:38:14][352539592439716][10746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539592439716\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4633\"}'\'' -e'"" [2025-09-06 13:38:19][352539592439716][15276 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7bcef64-4777-4313-9089-a61518c66ff3","id":"QR_c7bcef64-4777-4313-9089-a61518c66ff3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:38:19][352539592439716][15432 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-06 13:38:19][352539592439716][15432 ms][DEBUG] END runCmdUntilRes#2 in 4686 ms [2025-09-06 13:38:19][352539592439716][15432 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:38:21][352539592439716][0 ms][INFO] === Request start === [2025-09-06 13:38:21][352539592439716][1 ms][DEBUG] START check_scloud [2025-09-06 13:38:21][352539592439716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:38:21][352539592439716][240 ms][DEBUG] SU: done in 239 ms; outu0_a118 8968 25938 23775392 124336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:38:21][352539592439716][240 ms][DEBUG] targetPkg: running [2025-09-06 13:38:21][352539592439716][240 ms][DEBUG] END check_scloud in 240 ms [2025-09-06 13:38:21][352539592439716][240 ms][DEBUG] START check_boot_completed [2025-09-06 13:38:21][352539592439716][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:38:21][352539592439716][287 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:38:21][352539592439716][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:38:22][352539592439716][334 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:38:22][352539592439716][334 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:38:22][352539592439716][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:38:22][352539592439716][427 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1463\nsuccessfulTxPacketsPerSecond: 0.5745122457451225\nretriedTxPackets: 280\nretriedTxPacketsPerSecond: 0.15940224159402241\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1412\nsuccessfulRxPacketsPerSecond: 0.48152760481527607\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:38:22][352539592439716][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:38:22][352539592439716][787 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.312/260.312/260.312/0.000 ms\n [2025-09-06 13:38:22][352539592439716][787 ms][DEBUG] check_internet: online [2025-09-06 13:38:22][352539592439716][787 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:38:22][352539592439716][788 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539592439716\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7614\"}'\'' -e'"" [2025-09-06 13:38:22][352539592439716][788 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:38:22][352539592439716][788 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539592439716\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7614\"}'\'' -e'"" [2025-09-06 13:38:27][352539592439716][6020 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7a6bea2-a61a-4965-970e-a3449233532a","id":"QR_c7a6bea2-a61a-4965-970e-a3449233532a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:38:27][352539592439716][6176 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-06 13:38:27][352539592439716][6176 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-06 13:38:27][352539592439716][6176 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:40:03][354068193351250][1 ms][INFO] === Request start === [2025-09-06 13:40:03][354068193351250][1 ms][DEBUG] START check_scloud [2025-09-06 13:40:03][354068193351250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:40:03][354068193351250][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 8968 25938 23880720 137816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:40:03][354068193351250][302 ms][DEBUG] targetPkg: running [2025-09-06 13:40:03][354068193351250][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 13:40:03][354068193351250][303 ms][DEBUG] START check_boot_completed [2025-09-06 13:40:03][354068193351250][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:40:03][354068193351250][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:40:03][354068193351250][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:40:03][354068193351250][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:40:03][354068193351250][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:40:03][354068193351250][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:40:03][354068193351250][505 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1463\nsuccessfulTxPacketsPerSecond: 0.5745122457451225\nretriedTxPackets: 280\nretriedTxPacketsPerSecond: 0.15940224159402241\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1412\nsuccessfulRxPacketsPerSecond: 0.48152760481527607\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:40:03][354068193351250][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:40:05][354068193351250][2208 ms][DEBUG] SU: done in 1703 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.649/304.649/304.649/0.000 ms\n [2025-09-06 13:40:05][354068193351250][2208 ms][DEBUG] check_internet: online [2025-09-06 13:40:05][354068193351250][2208 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:40:05][354068193351250][2208 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193351250\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8072\"}'\'' -e'"" [2025-09-06 13:40:05][354068193351250][2208 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:40:05][354068193351250][2208 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193351250\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8072\"}'\'' -e'"" [2025-09-06 13:40:09][354068193351250][6004 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ac905a4-167a-44f6-bd12-0dde4a18c6ac","id":"QR_0ac905a4-167a-44f6-bd12-0dde4a18c6ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:40:09][354068193351250][6160 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-06 13:40:09][354068193351250][6160 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-06 13:40:09][354068193351250][6160 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:40:11][354068193351250][0 ms][INFO] === Request start === [2025-09-06 13:40:11][354068193351250][1 ms][DEBUG] START check_scloud [2025-09-06 13:40:11][354068193351250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:40:12][354068193351250][286 ms][DEBUG] SU: done in 286 ms; outu0_a118 8968 25938 24003468 149656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:40:12][354068193351250][287 ms][DEBUG] targetPkg: running [2025-09-06 13:40:12][354068193351250][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-06 13:40:12][354068193351250][287 ms][DEBUG] START check_boot_completed [2025-09-06 13:40:12][354068193351250][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:40:12][354068193351250][332 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 13:40:12][354068193351250][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:40:12][354068193351250][394 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 13:40:12][354068193351250][395 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 13:40:12][354068193351250][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:40:12][354068193351250][520 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1463\nsuccessfulTxPacketsPerSecond: 0.5745122457451225\nretriedTxPackets: 280\nretriedTxPacketsPerSecond: 0.15940224159402241\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1412\nsuccessfulRxPacketsPerSecond: 0.48152760481527607\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:40:12][354068193351250][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:40:12][354068193351250][879 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.267/228.267/228.267/0.000 ms\n [2025-09-06 13:40:12][354068193351250][879 ms][DEBUG] check_internet: online [2025-09-06 13:40:12][354068193351250][879 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:40:12][354068193351250][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193351250\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1569\"}'\'' -e'"" [2025-09-06 13:40:12][354068193351250][879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:40:12][354068193351250][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193351250\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1569\"}'\'' -e'"" [2025-09-06 13:40:18][354068193351250][6174 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17338fe6-2fa4-472c-a722-59d9133602f2","id":"QR_17338fe6-2fa4-472c-a722-59d9133602f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:40:18][354068193351250][6330 ms][DEBUG] proc_open done in 5452 ms; code=255; res.len=3343 [2025-09-06 13:40:18][354068193351250][6330 ms][DEBUG] END runCmdUntilRes#1 in 5452 ms [2025-09-06 13:40:18][354068193351250][6331 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:43:03][355326624587101][1 ms][INFO] === Request start === [2025-09-06 13:43:03][355326624587101][1 ms][DEBUG] START check_scloud [2025-09-06 13:43:03][355326624587101][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:43:04][355326624587101][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 8968 25938 24122764 160720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:43:04][355326624587101][261 ms][DEBUG] targetPkg: running [2025-09-06 13:43:04][355326624587101][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 13:43:04][355326624587101][261 ms][DEBUG] START check_boot_completed [2025-09-06 13:43:04][355326624587101][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:43:04][355326624587101][292 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:43:04][355326624587101][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:43:04][355326624587101][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:43:04][355326624587101][339 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:43:04][355326624587101][340 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:43:04][355326624587101][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326624587101\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9499\"}'\'' -e'"" [2025-09-06 13:43:04][355326624587101][340 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:43:04][355326624587101][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326624587101\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9499\"}'\'' -e'"" [2025-09-06 13:43:08][355326624587101][5072 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2db163a6-dd9c-4c57-9a0b-5541c54bcd58","id":"QR_2db163a6-dd9c-4c57-9a0b-5541c54bcd58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:43:08][355326624587101][5229 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 13:43:08][355326624587101][5229 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 13:43:08][355326624587101][5229 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:43:11][355326624587101][0 ms][INFO] === Request start === [2025-09-06 13:43:11][355326624587101][1 ms][DEBUG] START check_scloud [2025-09-06 13:43:11][355326624587101][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:43:11][355326624587101][323 ms][DEBUG] SU: done in 323 ms; outu0_a118 8968 25938 24261076 171164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:43:11][355326624587101][324 ms][DEBUG] targetPkg: running [2025-09-06 13:43:11][355326624587101][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-06 13:43:11][355326624587101][324 ms][DEBUG] START check_boot_completed [2025-09-06 13:43:11][355326624587101][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:43:11][355326624587101][370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:43:11][355326624587101][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:43:11][355326624587101][417 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:43:11][355326624587101][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:43:11][355326624587101][417 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:43:11][355326624587101][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326624587101\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3359\"}'\'' -e'"" [2025-09-06 13:43:11][355326624587101][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:43:11][355326624587101][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326624587101\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3359\"}'\'' -e'"" [2025-09-06 13:43:17][355326624587101][6134 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68378658-bd15-4fff-9d76-8d18a39e113a","id":"QR_68378658-bd15-4fff-9d76-8d18a39e113a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:43:17][355326624587101][6291 ms][DEBUG] proc_open done in 5874 ms; code=255; res.len=3343 [2025-09-06 13:43:17][355326624587101][6291 ms][DEBUG] END runCmdUntilRes#1 in 5874 ms [2025-09-06 13:43:17][355326624587101][6291 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:43:21][357450473070692][0 ms][INFO] === Request start === [2025-09-06 13:43:21][357450473070692][1 ms][DEBUG] START check_scloud [2025-09-06 13:43:21][357450473070692][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:43:22][357450473070692][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 8968 25938 24442460 180600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:43:22][357450473070692][319 ms][DEBUG] targetPkg: running [2025-09-06 13:43:22][357450473070692][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 13:43:22][357450473070692][319 ms][DEBUG] START check_boot_completed [2025-09-06 13:43:22][357450473070692][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:43:22][357450473070692][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:43:22][357450473070692][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:43:22][357450473070692][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:43:22][357450473070692][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:43:22][357450473070692][412 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:43:22][357450473070692][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473070692\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9898\"}'\'' -e'"" [2025-09-06 13:43:22][357450473070692][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:43:22][357450473070692][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473070692\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9898\"}'\'' -e'"" [2025-09-06 13:43:25][357450473070692][3880 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e32f7d5e-2a99-4bfb-bce6-c1699d36b69c","id":"QR_e32f7d5e-2a99-4bfb-bce6-c1699d36b69c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:43:25][357450473070692][4036 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-06 13:43:25][357450473070692][4036 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-06 13:43:25][357450473070692][4036 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:43:28][357450473070692][0 ms][INFO] === Request start === [2025-09-06 13:43:28][357450473070692][1 ms][DEBUG] START check_scloud [2025-09-06 13:43:28][357450473070692][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:43:28][357450473070692][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 8968 25938 24603392 189180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:43:28][357450473070692][257 ms][DEBUG] targetPkg: running [2025-09-06 13:43:28][357450473070692][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-06 13:43:28][357450473070692][257 ms][DEBUG] START check_boot_completed [2025-09-06 13:43:28][357450473070692][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:43:28][357450473070692][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:43:28][357450473070692][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:43:28][357450473070692][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:43:28][357450473070692][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:43:28][357450473070692][350 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:43:28][357450473070692][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473070692\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7433\"}'\'' -e'"" [2025-09-06 13:43:28][357450473070692][350 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:43:28][357450473070692][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473070692\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7433\"}'\'' -e'"" [2025-09-06 13:43:33][357450473070692][5052 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9da32cfc-45e7-438a-9791-a72bd02c4141","id":"QR_9da32cfc-45e7-438a-9791-a72bd02c4141","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:43:33][357450473070692][5208 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-09-06 13:43:33][357450473070692][5209 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-09-06 13:43:33][357450473070692][5209 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:44:03][350226690290736][0 ms][INFO] === Request start === [2025-09-06 13:44:03][350226690290736][1 ms][DEBUG] START check_scloud [2025-09-06 13:44:03][350226690290736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:44:04][350226690290736][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 8968 25938 24714140 194740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:44:04][350226690290736][293 ms][DEBUG] targetPkg: running [2025-09-06 13:44:04][350226690290736][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-06 13:44:04][350226690290736][293 ms][DEBUG] START check_boot_completed [2025-09-06 13:44:04][350226690290736][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:44:04][350226690290736][324 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:44:04][350226690290736][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:44:04][350226690290736][371 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:44:04][350226690290736][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:44:04][350226690290736][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:44:04][350226690290736][496 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1554\nsuccessfulTxPacketsPerSecond: 0.700193899849189\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.23083315379643593\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1488\nsuccessfulRxPacketsPerSecond: 0.5847773229509711\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:44:04][350226690290736][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:44:04][350226690290736][871 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.278/268.278/268.278/0.000 ms\n [2025-09-06 13:44:04][350226690290736][871 ms][DEBUG] check_internet: online [2025-09-06 13:44:04][350226690290736][871 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:44:04][350226690290736][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226690290736\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2467\"}'\'' -e'"" [2025-09-06 13:44:04][350226690290736][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:44:04][350226690290736][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226690290736\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2467\"}'\'' -e'"" [2025-09-06 13:44:09][350226690290736][5417 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e106a85c-1092-47e6-a72d-22ccc21fc3a0","id":"QR_e106a85c-1092-47e6-a72d-22ccc21fc3a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:44:09][350226690290736][5573 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-06 13:44:09][350226690290736][5573 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-06 13:44:09][350226690290736][5573 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:44:11][350226690290736][0 ms][INFO] === Request start === [2025-09-06 13:44:11][350226690290736][1 ms][DEBUG] START check_scloud [2025-09-06 13:44:11][350226690290736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:44:12][350226690290736][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 8968 25938 24885284 186392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:44:12][350226690290736][304 ms][DEBUG] targetPkg: running [2025-09-06 13:44:12][350226690290736][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 13:44:12][350226690290736][304 ms][DEBUG] START check_boot_completed [2025-09-06 13:44:12][350226690290736][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:44:12][350226690290736][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:44:12][350226690290736][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:44:12][350226690290736][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:44:12][350226690290736][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:44:12][350226690290736][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:44:12][350226690290736][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1554\nsuccessfulTxPacketsPerSecond: 0.700193899849189\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.23083315379643593\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1488\nsuccessfulRxPacketsPerSecond: 0.5847773229509711\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:44:12][350226690290736][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:44:12][350226690290736][1039 ms][DEBUG] SU: done in 532 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.696/219.696/219.696/0.000 ms\n [2025-09-06 13:44:12][350226690290736][1039 ms][DEBUG] check_internet: online [2025-09-06 13:44:12][350226690290736][1039 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:44:12][350226690290736][1039 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226690290736\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3820\"}'\'' -e'"" [2025-09-06 13:44:12][350226690290736][1039 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:44:12][350226690290736][1039 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226690290736\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3820\"}'\'' -e'"" [2025-09-06 13:44:18][350226690290736][6255 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bae62ddc-7a00-45a0-96df-3141e3cdb40b","id":"QR_bae62ddc-7a00-45a0-96df-3141e3cdb40b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:44:18][350226690290736][6411 ms][DEBUG] proc_open done in 5372 ms; code=255; res.len=3343 [2025-09-06 13:44:18][350226690290736][6411 ms][DEBUG] END runCmdUntilRes#1 in 5372 ms [2025-09-06 13:44:18][350226690290736][6412 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:44:22][351285623166404][0 ms][INFO] === Request start === [2025-09-06 13:44:22][351285623166404][1 ms][DEBUG] START check_scloud [2025-09-06 13:44:22][351285623166404][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:44:22][351285623166404][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 8968 25938 25048240 198192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:44:22][351285623166404][312 ms][DEBUG] targetPkg: running [2025-09-06 13:44:22][351285623166404][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 13:44:22][351285623166404][312 ms][DEBUG] START check_boot_completed [2025-09-06 13:44:22][351285623166404][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:44:22][351285623166404][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:44:22][351285623166404][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:44:22][351285623166404][421 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:44:22][351285623166404][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:44:22][351285623166404][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:44:23][351285623166404][562 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1554\nsuccessfulTxPacketsPerSecond: 0.700193899849189\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.23083315379643593\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1488\nsuccessfulRxPacketsPerSecond: 0.5847773229509711\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:44:23][351285623166404][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:44:23][351285623166404][952 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.830/253.830/253.830/0.000 ms\n [2025-09-06 13:44:23][351285623166404][952 ms][DEBUG] check_internet: online [2025-09-06 13:44:23][351285623166404][952 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:44:23][351285623166404][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285623166404\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5018\"}'\'' -e'"" [2025-09-06 13:44:23][351285623166404][952 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:44:23][351285623166404][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285623166404\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5018\"}'\'' -e'"" [2025-09-06 13:44:27][351285623166404][4967 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c2c56d5-6de6-4a0a-845a-4151a2628603","id":"QR_9c2c56d5-6de6-4a0a-845a-4151a2628603","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:44:27][351285623166404][5123 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-09-06 13:44:27][351285623166404][5123 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-09-06 13:44:27][351285623166404][5123 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:44:29][351285623166404][0 ms][INFO] === Request start === [2025-09-06 13:44:29][351285623166404][1 ms][DEBUG] START check_scloud [2025-09-06 13:44:29][351285623166404][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:44:30][351285623166404][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 8968 25938 25162004 210052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:44:30][351285623166404][318 ms][DEBUG] targetPkg: running [2025-09-06 13:44:30][351285623166404][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 13:44:30][351285623166404][318 ms][DEBUG] START check_boot_completed [2025-09-06 13:44:30][351285623166404][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:44:30][351285623166404][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:44:30][351285623166404][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:44:30][351285623166404][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:44:30][351285623166404][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:44:30][351285623166404][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:44:30][351285623166404][521 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=2459655 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1554\nsuccessfulTxPacketsPerSecond: 0.700193899849189\nretriedTxPackets: 310\nretriedTxPacketsPerSecond: 0.23083315379643593\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1488\nsuccessfulRxPacketsPerSecond: 0.5847773229509711\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:44:30][351285623166404][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:44:30][351285623166404][880 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.699/247.699/247.699/0.000 ms\n [2025-09-06 13:44:30][351285623166404][880 ms][DEBUG] check_internet: online [2025-09-06 13:44:30][351285623166404][880 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:44:30][351285623166404][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285623166404\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1669\"}'\'' -e'"" [2025-09-06 13:44:30][351285623166404][880 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:44:30][351285623166404][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285623166404\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1669\"}'\'' -e'"" [2025-09-06 13:44:38][351285623166404][8831 ms][DEBUG] proc_open done in 7951 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 13:44:38][351285623166404][8831 ms][DEBUG] END runCmdUntilRes#1 in 7951 ms [2025-09-06 13:44:38][351285623166404][8831 ms][WARN] Detected error: Process with pid 8968 either refused to load frida-agent, or terminated during injectionProcess with pid 8968 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 13:44:38][351285623166404][8831 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 13:44:39][351285623166404][9300 ms][DEBUG] SU: done in 469 ms; out [2025-09-06 13:44:39][351285623166404][9300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 13:44:39][351285623166404][9706 ms][DEBUG] SU: done in 406 ms; out [2025-09-06 13:44:39][351285623166404][9706 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 13:44:39][351285623166404][9706 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 13:44:39][351285623166404][9987 ms][DEBUG] SU: done in 281 ms; out [2025-09-06 13:44:39][351285623166404][9987 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 13:44:40][351285623166404][10207 ms][DEBUG] SU: done in 220 ms; out [2025-09-06 13:44:42][351285623166404][12221 ms][DEBUG] START check_boot_completed [2025-09-06 13:44:42][351285623166404][12221 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:44:42][351285623166404][12268 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:44:42][351285623166404][12268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:44:42][351285623166404][12330 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 13:44:42][351285623166404][12330 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 13:44:45][351285623166404][15345 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 13:44:45][351285623166404][15345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285623166404\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1669\"}'\'' -e'"" [2025-09-06 13:44:46][351285623166404][16892 ms][DEBUG] proc_open done in 1547 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-06 13:44:46][351285623166404][16892 ms][DEBUG] END runCmdUntilRes#2 in 1547 ms [2025-09-06 13:44:46][351285623166404][16892 ms][WARN] Detected error 2; Reboot the device [2025-09-06 13:44:46][351285623166404][16892 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 13:44:47][351285623166404][17157 ms][DEBUG] SU: done in 265 ms; outsystem 11201 10856 7862100 149680 0 0 R system_server\n [2025-09-06 13:44:47][351285623166404][17157 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-06 13:44:47][351285623166404][17844 ms][DEBUG] SU: done in 687 ms; out [2025-09-06 13:46:03][354068192346939][1 ms][INFO] === Request start === [2025-09-06 13:46:03][354068192346939][1 ms][DEBUG] START check_scloud [2025-09-06 13:46:03][354068192346939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:46:04][354068192346939][371 ms][DEBUG] SU: done in 370 ms; out [2025-09-06 13:46:04][354068192346939][371 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 13:46:04][354068192346939][402 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 13:46:04][354068192346939][402 ms][DEBUG] check_devices: device found [2025-09-06 13:46:04][354068192346939][402 ms][WARN] targetPkg: not running, restarting [2025-09-06 13:46:04][354068192346939][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 13:46:04][354068192346939][527 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 13:46:04][354068192346939][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 13:46:04][354068192346939][746 ms][DEBUG] SU: done in 218 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 13:46:06][354068192346939][2761 ms][DEBUG] END check_scloud in 2760 ms [2025-09-06 13:46:06][354068192346939][2761 ms][DEBUG] START check_boot_completed [2025-09-06 13:46:06][354068192346939][2761 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:46:06][354068192346939][2808 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:46:06][354068192346939][2808 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:46:06][354068192346939][2870 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:46:06][354068192346939][2870 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 13:46:06][354068192346939][2871 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:46:06][354068192346939][3073 ms][DEBUG] SU: done in 203 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -44, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 83\nsuccessfulTxPacketsPerSecond: 3.160739489169837\nretriedTxPackets: 4\nretriedTxPacketsPerSecond: 0.1700515939170945\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 81\nsuccessfulRxPacketsPerSecond: 3.6637764826093315\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:46:06][354068192346939][3074 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:46:07][354068192346939][4167 ms][DEBUG] SU: done in 1093 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.028/294.028/294.028/0.000 ms\n [2025-09-06 13:46:07][354068192346939][4167 ms][DEBUG] check_internet: online [2025-09-06 13:46:07][354068192346939][4167 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:46:07][354068192346939][4167 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192346939\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3189\"}'\'' -e'"" [2025-09-06 13:46:07][354068192346939][4167 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:46:07][354068192346939][4167 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192346939\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3189\"}'\'' -e'"" [2025-09-06 13:46:13][354068192346939][9603 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c3635fa-f6bf-4c60-8275-866b33a42a19","id":"QR_7c3635fa-f6bf-4c60-8275-866b33a42a19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:46:13][354068192346939][9759 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-09-06 13:46:13][354068192346939][9759 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-09-06 13:46:13][354068192346939][9760 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:46:15][354068192346939][0 ms][INFO] === Request start === [2025-09-06 13:46:15][354068192346939][1 ms][DEBUG] START check_scloud [2025-09-06 13:46:15][354068192346939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:46:16][354068192346939][356 ms][DEBUG] SU: done in 356 ms; outu0_a118 8690 5009 23572900 108600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:46:16][354068192346939][356 ms][DEBUG] targetPkg: running [2025-09-06 13:46:16][354068192346939][357 ms][DEBUG] END check_scloud in 356 ms [2025-09-06 13:46:16][354068192346939][357 ms][DEBUG] START check_boot_completed [2025-09-06 13:46:16][354068192346939][357 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:46:16][354068192346939][403 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:46:16][354068192346939][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:46:16][354068192346939][466 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:46:16][354068192346939][466 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:46:16][354068192346939][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:46:16][354068192346939][684 ms][DEBUG] SU: done in 219 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 192\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 18\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 193\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:46:16][354068192346939][685 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:46:16][354068192346939][1075 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.567/237.567/237.567/0.000 ms\n [2025-09-06 13:46:16][354068192346939][1075 ms][DEBUG] check_internet: online [2025-09-06 13:46:16][354068192346939][1075 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:46:16][354068192346939][1075 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192346939\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3112\"}'\'' -e'"" [2025-09-06 13:46:16][354068192346939][1075 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:46:16][354068192346939][1075 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192346939\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3112\"}'\'' -e'"" [2025-09-06 13:46:23][354068192346939][7542 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_963a20ec-0275-498b-a897-df1d6aa800b5","id":"QR_963a20ec-0275-498b-a897-df1d6aa800b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:46:23][354068192346939][7698 ms][DEBUG] proc_open done in 6623 ms; code=255; res.len=3343 [2025-09-06 13:46:23][354068192346939][7698 ms][DEBUG] END runCmdUntilRes#1 in 6623 ms [2025-09-06 13:46:23][354068192346939][7698 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:46:27][352288960395932][0 ms][INFO] === Request start === [2025-09-06 13:46:27][352288960395932][1 ms][DEBUG] START check_scloud [2025-09-06 13:46:27][352288960395932][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:46:28][352288960395932][354 ms][DEBUG] SU: done in 353 ms; outu0_a118 8690 5009 23732856 91700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:46:28][352288960395932][354 ms][DEBUG] targetPkg: running [2025-09-06 13:46:28][352288960395932][354 ms][DEBUG] END check_scloud in 353 ms [2025-09-06 13:46:28][352288960395932][354 ms][DEBUG] START check_boot_completed [2025-09-06 13:46:28][352288960395932][354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:46:28][352288960395932][385 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:46:28][352288960395932][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:46:28][352288960395932][447 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:46:28][352288960395932][448 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 13:46:28][352288960395932][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:46:28][352288960395932][619 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 192\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 18\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 193\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:46:28][352288960395932][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:46:28][352288960395932][979 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.597/221.597/221.597/0.000 ms\n [2025-09-06 13:46:28][352288960395932][979 ms][DEBUG] check_internet: online [2025-09-06 13:46:28][352288960395932][979 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:46:28][352288960395932][979 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960395932\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3100\"}'\'' -e'"" [2025-09-06 13:46:28][352288960395932][979 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:46:28][352288960395932][979 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960395932\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3100\"}'\'' -e'"" [2025-09-06 13:46:32][352288960395932][4915 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b6ade502-bea3-4ddf-ab29-70cc2b39ca95","id":"QR_b6ade502-bea3-4ddf-ab29-70cc2b39ca95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:46:32][352288960395932][5071 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-09-06 13:46:32][352288960395932][5071 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-06 13:46:32][352288960395932][5071 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:46:35][352288960395932][0 ms][INFO] === Request start === [2025-09-06 13:46:35][352288960395932][1 ms][DEBUG] START check_scloud [2025-09-06 13:46:35][352288960395932][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:46:35][352288960395932][353 ms][DEBUG] SU: done in 352 ms; outu0_a118 8690 5009 23879544 85948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:46:35][352288960395932][353 ms][DEBUG] targetPkg: running [2025-09-06 13:46:35][352288960395932][353 ms][DEBUG] END check_scloud in 352 ms [2025-09-06 13:46:35][352288960395932][353 ms][DEBUG] START check_boot_completed [2025-09-06 13:46:35][352288960395932][353 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:46:35][352288960395932][399 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:46:35][352288960395932][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:46:35][352288960395932][462 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:46:35][352288960395932][462 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:46:35][352288960395932][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:46:35][352288960395932][634 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 192\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 18\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 193\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:46:35][352288960395932][634 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:46:36][352288960395932][977 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.269/220.269/220.269/0.000 ms\n [2025-09-06 13:46:36][352288960395932][977 ms][DEBUG] check_internet: online [2025-09-06 13:46:36][352288960395932][977 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:46:36][352288960395932][977 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960395932\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5088\"}'\'' -e'"" [2025-09-06 13:46:36][352288960395932][977 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:46:36][352288960395932][977 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960395932\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5088\"}'\'' -e'"" [2025-09-06 13:46:40][352288960395932][5742 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd8c843f-beb4-4656-8f85-ad042fb057e0","id":"QR_bd8c843f-beb4-4656-8f85-ad042fb057e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:46:40][352288960395932][5898 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-06 13:46:40][352288960395932][5898 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-06 13:46:40][352288960395932][5898 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:48:04][354909112811827][1 ms][INFO] === Request start === [2025-09-06 13:48:04][354909112811827][1 ms][DEBUG] START check_scloud [2025-09-06 13:48:04][354909112811827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:48:04][354909112811827][324 ms][DEBUG] SU: done in 322 ms; outu0_a118 8690 5009 23882596 64176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:48:04][354909112811827][324 ms][DEBUG] targetPkg: running [2025-09-06 13:48:04][354909112811827][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-06 13:48:04][354909112811827][324 ms][DEBUG] START check_boot_completed [2025-09-06 13:48:04][354909112811827][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:48:04][354909112811827][370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:48:04][354909112811827][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:48:04][354909112811827][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:48:04][354909112811827][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:48:04][354909112811827][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:48:05][354909112811827][542 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 970\nsuccessfulTxPacketsPerSecond: 7.3678005178721095\nretriedTxPackets: 117\nretriedTxPacketsPerSecond: 1.2115062236953307\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1001\nsuccessfulRxPacketsPerSecond: 7.088444896466131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:48:05][354909112811827][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:48:05][354909112811827][934 ms][DEBUG] SU: done in 392 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.750/300.750/300.750/0.000 ms\n [2025-09-06 13:48:05][354909112811827][934 ms][DEBUG] check_internet: online [2025-09-06 13:48:05][354909112811827][934 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:48:05][354909112811827][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354909112811827\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8660\"}'\'' -e'"" [2025-09-06 13:48:05][354909112811827][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:48:05][354909112811827][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354909112811827\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8660\"}'\'' -e'"" [2025-09-06 13:48:11][354909112811827][7415 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e52e488-6c27-4725-bd99-b295ffcb52dc","id":"QR_7e52e488-6c27-4725-bd99-b295ffcb52dc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:48:12][354909112811827][7572 ms][DEBUG] proc_open done in 6637 ms; code=255; res.len=3343 [2025-09-06 13:48:12][354909112811827][7572 ms][DEBUG] END runCmdUntilRes#1 in 6637 ms [2025-09-06 13:48:12][354909112811827][7572 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:48:15][354909112811827][0 ms][INFO] === Request start === [2025-09-06 13:48:15][354909112811827][1 ms][DEBUG] START check_scloud [2025-09-06 13:48:15][354909112811827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:48:15][354909112811827][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 8690 5009 24040480 81296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:48:15][354909112811827][271 ms][DEBUG] targetPkg: running [2025-09-06 13:48:15][354909112811827][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-06 13:48:15][354909112811827][271 ms][DEBUG] START check_boot_completed [2025-09-06 13:48:15][354909112811827][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:48:15][354909112811827][317 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:48:15][354909112811827][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:48:15][354909112811827][380 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:48:15][354909112811827][380 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:48:15][354909112811827][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:48:16][354909112811827][505 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 970\nsuccessfulTxPacketsPerSecond: 7.3678005178721095\nretriedTxPackets: 117\nretriedTxPacketsPerSecond: 1.2115062236953307\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1001\nsuccessfulRxPacketsPerSecond: 7.088444896466131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:48:16][354909112811827][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:48:16][354909112811827][911 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.003/299.003/299.003/0.000 ms\n [2025-09-06 13:48:16][354909112811827][911 ms][DEBUG] check_internet: online [2025-09-06 13:48:16][354909112811827][911 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:48:16][354909112811827][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354909112811827\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9279\"}'\'' -e'"" [2025-09-06 13:48:16][354909112811827][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:48:16][354909112811827][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354909112811827\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9279\"}'\'' -e'"" [2025-09-06 13:48:20][354909112811827][4550 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e90a8431-7f20-4f8d-9ff5-49a45d985d7e","id":"QR_e90a8431-7f20-4f8d-9ff5-49a45d985d7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:48:20][354909112811827][4707 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-09-06 13:48:20][354909112811827][4707 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-09-06 13:48:20][354909112811827][4707 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:48:22][350637541720756][0 ms][INFO] === Request start === [2025-09-06 13:48:22][350637541720756][1 ms][DEBUG] START check_scloud [2025-09-06 13:48:22][350637541720756][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:48:22][350637541720756][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 8690 5009 24195240 98796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:48:22][350637541720756][324 ms][DEBUG] targetPkg: running [2025-09-06 13:48:22][350637541720756][324 ms][DEBUG] END check_scloud in 324 ms [2025-09-06 13:48:22][350637541720756][324 ms][DEBUG] START check_boot_completed [2025-09-06 13:48:22][350637541720756][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:48:22][350637541720756][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:48:22][350637541720756][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:48:22][350637541720756][418 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:48:22][350637541720756][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:48:22][350637541720756][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:48:22][350637541720756][527 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 970\nsuccessfulTxPacketsPerSecond: 7.3678005178721095\nretriedTxPackets: 117\nretriedTxPacketsPerSecond: 1.2115062236953307\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1001\nsuccessfulRxPacketsPerSecond: 7.088444896466131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:48:22][350637541720756][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:48:23][350637541720756][871 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.249/227.249/227.249/0.000 ms\n [2025-09-06 13:48:23][350637541720756][871 ms][DEBUG] check_internet: online [2025-09-06 13:48:23][350637541720756][871 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:48:23][350637541720756][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637541720756\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6124\"}'\'' -e'"" [2025-09-06 13:48:23][350637541720756][871 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:48:23][350637541720756][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637541720756\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6124\"}'\'' -e'"" [2025-09-06 13:48:26][350637541720756][4214 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_149275dd-b8e0-41f2-868e-1d9d21b9c84a","id":"QR_149275dd-b8e0-41f2-868e-1d9d21b9c84a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:48:26][350637541720756][4370 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-06 13:48:26][350637541720756][4370 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-06 13:48:26][350637541720756][4370 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:48:28][350637541720756][0 ms][INFO] === Request start === [2025-09-06 13:48:28][350637541720756][1 ms][DEBUG] START check_scloud [2025-09-06 13:48:28][350637541720756][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:48:29][350637541720756][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 8690 5009 24310668 111004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:48:29][350637541720756][317 ms][DEBUG] targetPkg: running [2025-09-06 13:48:29][350637541720756][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 13:48:29][350637541720756][317 ms][DEBUG] START check_boot_completed [2025-09-06 13:48:29][350637541720756][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:48:29][350637541720756][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:48:29][350637541720756][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:48:29][350637541720756][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:48:29][350637541720756][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:48:29][350637541720756][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:48:29][350637541720756][551 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 970\nsuccessfulTxPacketsPerSecond: 7.3678005178721095\nretriedTxPackets: 117\nretriedTxPacketsPerSecond: 1.2115062236953307\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1001\nsuccessfulRxPacketsPerSecond: 7.088444896466131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:48:29][350637541720756][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:48:29][350637541720756][926 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.111/227.111/227.111/0.000 ms\n [2025-09-06 13:48:29][350637541720756][926 ms][DEBUG] check_internet: online [2025-09-06 13:48:29][350637541720756][926 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:48:29][350637541720756][926 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637541720756\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6205\"}'\'' -e'"" [2025-09-06 13:48:29][350637541720756][926 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:48:29][350637541720756][926 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637541720756\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6205\"}'\'' -e'"" [2025-09-06 13:48:34][350637541720756][5159 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_922449c5-aacd-40fc-a90e-89d682c4fe50","id":"QR_922449c5-aacd-40fc-a90e-89d682c4fe50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:48:34][350637541720756][5315 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-09-06 13:48:34][350637541720756][5315 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-09-06 13:48:34][350637541720756][5315 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:49:03][353548757818969][0 ms][INFO] === Request start === [2025-09-06 13:49:03][353548757818969][1 ms][DEBUG] START check_scloud [2025-09-06 13:49:03][353548757818969][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:49:04][353548757818969][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 8690 5009 24393640 122092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:49:04][353548757818969][311 ms][DEBUG] targetPkg: running [2025-09-06 13:49:04][353548757818969][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 13:49:04][353548757818969][311 ms][DEBUG] START check_boot_completed [2025-09-06 13:49:04][353548757818969][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:49:04][353548757818969][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:49:04][353548757818969][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:49:04][353548757818969][451 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 13:49:04][353548757818969][451 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 13:49:04][353548757818969][451 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:49:04][353548757818969][451 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548757818969\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9868\"}'\'' -e'"" [2025-09-06 13:49:04][353548757818969][451 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:49:04][353548757818969][451 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548757818969\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9868\"}'\'' -e'"" [2025-09-06 13:49:07][353548757818969][3888 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b260ac51-8bf8-4050-99ad-bedba0472454","id":"QR_b260ac51-8bf8-4050-99ad-bedba0472454","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:49:07][353548757818969][4044 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-06 13:49:07][353548757818969][4044 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-09-06 13:49:07][353548757818969][4044 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:49:10][353548757818969][0 ms][INFO] === Request start === [2025-09-06 13:49:10][353548757818969][1 ms][DEBUG] START check_scloud [2025-09-06 13:49:10][353548757818969][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:49:10][353548757818969][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 8690 5009 24534064 133140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:49:10][353548757818969][268 ms][DEBUG] targetPkg: running [2025-09-06 13:49:10][353548757818969][268 ms][DEBUG] END check_scloud in 268 ms [2025-09-06 13:49:10][353548757818969][269 ms][DEBUG] START check_boot_completed [2025-09-06 13:49:10][353548757818969][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:49:10][353548757818969][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:49:10][353548757818969][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:49:10][353548757818969][393 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 13:49:10][353548757818969][393 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 13:49:10][353548757818969][393 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:49:10][353548757818969][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548757818969\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4515\"}'\'' -e'"" [2025-09-06 13:49:10][353548757818969][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:49:10][353548757818969][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548757818969\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4515\"}'\'' -e'"" [2025-09-06 13:49:16][353548757818969][6142 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49be1672-9d6e-46ab-b976-d0c69ca57aa0","id":"QR_49be1672-9d6e-46ab-b976-d0c69ca57aa0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:49:16][353548757818969][6298 ms][DEBUG] proc_open done in 5904 ms; code=255; res.len=3343 [2025-09-06 13:49:16][353548757818969][6298 ms][DEBUG] END runCmdUntilRes#1 in 5904 ms [2025-09-06 13:49:16][353548757818969][6298 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:49:20][351684402335281][0 ms][INFO] === Request start === [2025-09-06 13:49:20][351684402335281][1 ms][DEBUG] START check_scloud [2025-09-06 13:49:20][351684402335281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:49:21][351684402335281][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 8690 5009 24684728 144932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:49:21][351684402335281][285 ms][DEBUG] targetPkg: running [2025-09-06 13:49:21][351684402335281][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-06 13:49:21][351684402335281][285 ms][DEBUG] START check_boot_completed [2025-09-06 13:49:21][351684402335281][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:49:21][351684402335281][332 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:49:21][351684402335281][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:49:21][351684402335281][394 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:49:21][351684402335281][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:49:21][351684402335281][394 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:49:21][351684402335281][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684402335281\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9059\"}'\'' -e'"" [2025-09-06 13:49:21][351684402335281][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:49:21][351684402335281][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684402335281\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9059\"}'\'' -e'"" [2025-09-06 13:49:25][351684402335281][4284 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b240ee9c-b8b8-4c67-9ed4-cbe53975502e","id":"QR_b240ee9c-b8b8-4c67-9ed4-cbe53975502e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:49:25][351684402335281][4440 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-09-06 13:49:25][351684402335281][4440 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-06 13:49:25][351684402335281][4440 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:49:27][351684402335281][0 ms][INFO] === Request start === [2025-09-06 13:49:27][351684402335281][1 ms][DEBUG] START check_scloud [2025-09-06 13:49:27][351684402335281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:49:27][351684402335281][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 8690 5009 24796572 155828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:49:27][351684402335281][312 ms][DEBUG] targetPkg: running [2025-09-06 13:49:27][351684402335281][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 13:49:27][351684402335281][312 ms][DEBUG] START check_boot_completed [2025-09-06 13:49:27][351684402335281][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:49:27][351684402335281][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:49:27][351684402335281][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:49:27][351684402335281][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:49:27][351684402335281][420 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 13:49:27][351684402335281][420 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:49:27][351684402335281][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684402335281\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8332\"}'\'' -e'"" [2025-09-06 13:49:27][351684402335281][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:49:27][351684402335281][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684402335281\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8332\"}'\'' -e'"" [2025-09-06 13:49:32][351684402335281][4576 ms][DEBUG] proc_open done in 4155 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 13:49:32][351684402335281][4576 ms][DEBUG] END runCmdUntilRes#1 in 4156 ms [2025-09-06 13:49:32][351684402335281][4576 ms][WARN] Detected error: Process with pid 8690 either refused to load frida-agent, or terminated during injectionProcess with pid 8690 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 13:49:32][351684402335281][4576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 13:49:32][351684402335281][4872 ms][DEBUG] SU: done in 296 ms; outsystem 5430 5009 13366428 582556 ep_poll 0 S system_server\n [2025-09-06 13:49:32][351684402335281][4872 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 13:49:32][351684402335281][5013 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 13:49:32][351684402335281][5013 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 13:49:32][351684402335281][5013 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 13:49:32][351684402335281][5169 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 13:49:32][351684402335281][5169 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 13:49:32][351684402335281][5357 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 13:49:34][351684402335281][7371 ms][DEBUG] START check_boot_completed [2025-09-06 13:49:34][351684402335281][7372 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:49:34][351684402335281][7418 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:49:34][351684402335281][7419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:49:34][351684402335281][7465 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:49:34][351684402335281][7466 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 13:49:37][351684402335281][10480 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 13:49:37][351684402335281][10480 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684402335281\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8332\"}'\'' -e'"" [2025-09-06 13:49:42][351684402335281][15354 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e58964a4-2031-43a9-8474-64f92f3771ec","id":"QR_e58964a4-2031-43a9-8474-64f92f3771ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:49:43][351684402335281][15510 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-06 13:49:43][351684402335281][15510 ms][DEBUG] END runCmdUntilRes#2 in 5030 ms [2025-09-06 13:49:43][351684402335281][15510 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:50:04][357980441412428][0 ms][INFO] === Request start === [2025-09-06 13:50:04][357980441412428][1 ms][DEBUG] START check_scloud [2025-09-06 13:50:04][357980441412428][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:50:05][357980441412428][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 18348 5009 23514872 127920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:50:05][357980441412428][319 ms][DEBUG] targetPkg: running [2025-09-06 13:50:05][357980441412428][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 13:50:05][357980441412428][319 ms][DEBUG] START check_boot_completed [2025-09-06 13:50:05][357980441412428][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:50:05][357980441412428][364 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 13:50:05][357980441412428][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:50:05][357980441412428][426 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:50:05][357980441412428][426 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-06 13:50:05][357980441412428][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:50:05][357980441412428][583 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 970\nsuccessfulTxPacketsPerSecond: 7.3678005178721095\nretriedTxPackets: 117\nretriedTxPacketsPerSecond: 1.2115062236953307\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1001\nsuccessfulRxPacketsPerSecond: 7.088444896466131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:50:05][357980441412428][583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:50:06][357980441412428][1988 ms][DEBUG] SU: done in 1405 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.893/300.893/300.893/0.000 ms\n [2025-09-06 13:50:06][357980441412428][1988 ms][DEBUG] check_internet: online [2025-09-06 13:50:06][357980441412428][1988 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:50:06][357980441412428][1988 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980441412428\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9680\"}'\'' -e'"" [2025-09-06 13:50:06][357980441412428][1988 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:50:06][357980441412428][1988 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980441412428\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9680\"}'\'' -e'"" [2025-09-06 13:50:11][357980441412428][6628 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e291a51-852b-4d30-a860-ec7d512a71a3","id":"QR_6e291a51-852b-4d30-a860-ec7d512a71a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:50:11][357980441412428][6784 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-09-06 13:50:11][357980441412428][6784 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-06 13:50:11][357980441412428][6784 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:50:15][357980441412428][1 ms][INFO] === Request start === [2025-09-06 13:50:15][357980441412428][1 ms][DEBUG] START check_scloud [2025-09-06 13:50:15][357980441412428][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:50:15][357980441412428][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18348 5009 23636864 138552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:50:15][357980441412428][307 ms][DEBUG] targetPkg: running [2025-09-06 13:50:15][357980441412428][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 13:50:15][357980441412428][307 ms][DEBUG] START check_boot_completed [2025-09-06 13:50:15][357980441412428][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:50:15][357980441412428][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:50:15][357980441412428][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:50:15][357980441412428][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 13:50:15][357980441412428][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 13:50:15][357980441412428][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:50:15][357980441412428][541 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 970\nsuccessfulTxPacketsPerSecond: 7.3678005178721095\nretriedTxPackets: 117\nretriedTxPacketsPerSecond: 1.2115062236953307\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1001\nsuccessfulRxPacketsPerSecond: 7.088444896466131\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:50:15][357980441412428][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:50:16][357980441412428][994 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.575/300.575/300.575/0.000 ms\n [2025-09-06 13:50:16][357980441412428][994 ms][DEBUG] check_internet: online [2025-09-06 13:50:16][357980441412428][995 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:50:16][357980441412428][995 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980441412428\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2080\"}'\'' -e'"" [2025-09-06 13:50:16][357980441412428][995 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:50:16][357980441412428][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980441412428\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2080\"}'\'' -e'"" [2025-09-06 13:50:19][357980441412428][4462 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ee6e90d-2cd6-4fc2-8f5e-382657d5351e","id":"QR_2ee6e90d-2cd6-4fc2-8f5e-382657d5351e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:50:19][357980441412428][4618 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-06 13:50:19][357980441412428][4618 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-06 13:50:19][357980441412428][4619 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:56:03][356196385580358][1 ms][INFO] === Request start === [2025-09-06 13:56:03][356196385580358][1 ms][DEBUG] START check_scloud [2025-09-06 13:56:03][356196385580358][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:56:03][356196385580358][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 18348 5009 23749520 150824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:56:03][356196385580358][296 ms][DEBUG] targetPkg: running [2025-09-06 13:56:03][356196385580358][296 ms][DEBUG] END check_scloud in 295 ms [2025-09-06 13:56:03][356196385580358][296 ms][DEBUG] START check_boot_completed [2025-09-06 13:56:03][356196385580358][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:56:03][356196385580358][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:56:03][356196385580358][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:56:03][356196385580358][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:56:03][356196385580358][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:56:03][356196385580358][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:56:03][356196385580358][484 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1476\nsuccessfulTxPacketsPerSecond: 0.3088951848887147\nretriedTxPackets: 234\nretriedTxPacketsPerSecond: 0.08303634002384803\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1449\nsuccessfulRxPacketsPerSecond: 0.26903774167726763\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:56:03][356196385580358][484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:56:05][356196385580358][1999 ms][DEBUG] SU: done in 1515 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=405 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 405.412/405.412/405.412/0.000 ms\n [2025-09-06 13:56:05][356196385580358][1999 ms][DEBUG] check_internet: online [2025-09-06 13:56:05][356196385580358][1999 ms][DEBUG] rawBody.length=1149 [2025-09-06 13:56:05][356196385580358][1999 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356196385580358\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2436\"}'\'' -e'"" [2025-09-06 13:56:05][356196385580358][1999 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:56:05][356196385580358][1999 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356196385580358\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2436\"}'\'' -e'"" [2025-09-06 13:56:09][356196385580358][5920 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d92129b-66dd-494e-86ec-1465be60f324","id":"QR_6d92129b-66dd-494e-86ec-1465be60f324","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:56:09][356196385580358][6076 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-09-06 13:56:09][356196385580358][6076 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-06 13:56:09][356196385580358][6076 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:56:11][356196385580358][0 ms][INFO] === Request start === [2025-09-06 13:56:11][356196385580358][1 ms][DEBUG] START check_scloud [2025-09-06 13:56:11][356196385580358][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:56:12][356196385580358][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 18348 5009 23912600 162164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:56:12][356196385580358][303 ms][DEBUG] targetPkg: running [2025-09-06 13:56:12][356196385580358][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 13:56:12][356196385580358][303 ms][DEBUG] START check_boot_completed [2025-09-06 13:56:12][356196385580358][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:56:12][356196385580358][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:56:12][356196385580358][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:56:12][356196385580358][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:56:12][356196385580358][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 13:56:12][356196385580358][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:56:12][356196385580358][521 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1476\nsuccessfulTxPacketsPerSecond: 0.3088951848887147\nretriedTxPackets: 234\nretriedTxPacketsPerSecond: 0.08303634002384803\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1449\nsuccessfulRxPacketsPerSecond: 0.26903774167726763\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:56:12][356196385580358][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:56:12][356196385580358][881 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.079/265.079/265.079/0.000 ms\n [2025-09-06 13:56:12][356196385580358][881 ms][DEBUG] check_internet: online [2025-09-06 13:56:12][356196385580358][881 ms][DEBUG] rawBody.length=1159 [2025-09-06 13:56:12][356196385580358][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356196385580358\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2265\"}'\'' -e'"" [2025-09-06 13:56:12][356196385580358][881 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:56:12][356196385580358][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356196385580358\",\"model\":\"SM-T505\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2265\"}'\'' -e'"" [2025-09-06 13:56:17][356196385580358][6176 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61a64884-7d60-4da7-a5ae-2e3670886794","id":"QR_61a64884-7d60-4da7-a5ae-2e3670886794","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:56:18][356196385580358][6332 ms][DEBUG] proc_open done in 5451 ms; code=255; res.len=3343 [2025-09-06 13:56:18][356196385580358][6332 ms][DEBUG] END runCmdUntilRes#1 in 5451 ms [2025-09-06 13:56:18][356196385580358][6332 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:56:22][352469857042445][0 ms][INFO] === Request start === [2025-09-06 13:56:22][352469857042445][1 ms][DEBUG] START check_scloud [2025-09-06 13:56:22][352469857042445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:56:22][352469857042445][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 18348 5009 24083872 173320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:56:22][352469857042445][317 ms][DEBUG] targetPkg: running [2025-09-06 13:56:22][352469857042445][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 13:56:22][352469857042445][317 ms][DEBUG] START check_boot_completed [2025-09-06 13:56:22][352469857042445][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:56:22][352469857042445][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:56:22][352469857042445][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:56:22][352469857042445][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:56:22][352469857042445][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:56:22][352469857042445][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:56:23][352469857042445][535 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1476\nsuccessfulTxPacketsPerSecond: 0.3088951848887147\nretriedTxPackets: 234\nretriedTxPacketsPerSecond: 0.08303634002384803\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1449\nsuccessfulRxPacketsPerSecond: 0.26903774167726763\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:56:23][352469857042445][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:56:23][352469857042445][1019 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=333 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 333.679/333.679/333.679/0.000 ms\n [2025-09-06 13:56:23][352469857042445][1020 ms][DEBUG] check_internet: online [2025-09-06 13:56:23][352469857042445][1020 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:56:23][352469857042445][1020 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469857042445\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3729\"}'\'' -e'"" [2025-09-06 13:56:23][352469857042445][1020 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:56:23][352469857042445][1020 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469857042445\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3729\"}'\'' -e'"" [2025-09-06 13:56:26][352469857042445][4315 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_179dba44-6361-4241-b087-f6b0510efd49","id":"QR_179dba44-6361-4241-b087-f6b0510efd49","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:56:26][352469857042445][4472 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-06 13:56:26][352469857042445][4472 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-06 13:56:26][352469857042445][4472 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:56:29][352469857042445][1 ms][INFO] === Request start === [2025-09-06 13:56:29][352469857042445][1 ms][DEBUG] START check_scloud [2025-09-06 13:56:29][352469857042445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:56:29][352469857042445][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 18348 5009 24244804 184432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:56:29][352469857042445][303 ms][DEBUG] targetPkg: running [2025-09-06 13:56:29][352469857042445][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 13:56:29][352469857042445][303 ms][DEBUG] START check_boot_completed [2025-09-06 13:56:29][352469857042445][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:56:29][352469857042445][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:56:29][352469857042445][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:56:29][352469857042445][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:56:29][352469857042445][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:56:29][352469857042445][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 13:56:29][352469857042445][505 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1476\nsuccessfulTxPacketsPerSecond: 0.3088951848887147\nretriedTxPackets: 234\nretriedTxPacketsPerSecond: 0.08303634002384803\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1449\nsuccessfulRxPacketsPerSecond: 0.26903774167726763\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 13:56:29][352469857042445][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 13:56:30][352469857042445][849 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.094/227.094/227.094/0.000 ms\n [2025-09-06 13:56:30][352469857042445][849 ms][DEBUG] check_internet: online [2025-09-06 13:56:30][352469857042445][849 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:56:30][352469857042445][849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469857042445\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7046\"}'\'' -e'"" [2025-09-06 13:56:30][352469857042445][849 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:56:30][352469857042445][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469857042445\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7046\"}'\'' -e'"" [2025-09-06 13:56:34][352469857042445][5598 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0718bd0a-65ce-4a7c-87e6-0d59d705e537","id":"QR_0718bd0a-65ce-4a7c-87e6-0d59d705e537","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:56:35][352469857042445][5754 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 13:56:35][352469857042445][5754 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 13:56:35][352469857042445][5754 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:57:03][353520952403632][1 ms][INFO] === Request start === [2025-09-06 13:57:03][353520952403632][1 ms][DEBUG] START check_scloud [2025-09-06 13:57:03][353520952403632][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:57:03][353520952403632][252 ms][DEBUG] SU: done in 250 ms; outu0_a118 18348 5009 24319584 195144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:57:03][353520952403632][252 ms][DEBUG] targetPkg: running [2025-09-06 13:57:03][353520952403632][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-06 13:57:03][353520952403632][252 ms][DEBUG] START check_boot_completed [2025-09-06 13:57:03][353520952403632][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:57:03][353520952403632][283 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:57:03][353520952403632][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:57:03][353520952403632][330 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:57:03][353520952403632][330 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 13:57:03][353520952403632][330 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:57:03][353520952403632][330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520952403632\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2093\"}'\'' -e'"" [2025-09-06 13:57:03][353520952403632][330 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:57:03][353520952403632][330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520952403632\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2093\"}'\'' -e'"" [2025-09-06 13:57:07][353520952403632][3610 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f7c15c5-ae2e-4b6b-b38d-81905d4a0560","id":"QR_4f7c15c5-ae2e-4b6b-b38d-81905d4a0560","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:57:07][353520952403632][3766 ms][DEBUG] proc_open done in 3437 ms; code=255; res.len=3343 [2025-09-06 13:57:07][353520952403632][3766 ms][DEBUG] END runCmdUntilRes#1 in 3437 ms [2025-09-06 13:57:07][353520952403632][3766 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:57:09][353520952403632][0 ms][INFO] === Request start === [2025-09-06 13:57:09][353520952403632][1 ms][DEBUG] START check_scloud [2025-09-06 13:57:09][353520952403632][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:57:09][353520952403632][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 18348 5009 24464104 206808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:57:09][353520952403632][250 ms][DEBUG] targetPkg: running [2025-09-06 13:57:09][353520952403632][250 ms][DEBUG] END check_scloud in 250 ms [2025-09-06 13:57:09][353520952403632][250 ms][DEBUG] START check_boot_completed [2025-09-06 13:57:09][353520952403632][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:57:10][353520952403632][297 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 13:57:10][353520952403632][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:57:10][353520952403632][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 13:57:10][353520952403632][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 13:57:10][353520952403632][344 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:57:10][353520952403632][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520952403632\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5516\"}'\'' -e'"" [2025-09-06 13:57:10][353520952403632][344 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:57:10][353520952403632][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520952403632\",\"model\":\"SM-A166B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5516\"}'\'' -e'"" [2025-09-06 13:57:14][353520952403632][5015 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93c80f13-d91d-423b-8943-ffe65b7d5524","id":"QR_93c80f13-d91d-423b-8943-ffe65b7d5524","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:57:14][353520952403632][5171 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-06 13:57:14][353520952403632][5171 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-06 13:57:14][353520952403632][5171 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:59:03][357962502093594][0 ms][INFO] === Request start === [2025-09-06 13:59:03][357962502093594][1 ms][DEBUG] START check_scloud [2025-09-06 13:59:03][357962502093594][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:59:03][357962502093594][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 18348 5009 24571496 217552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:59:03][357962502093594][247 ms][DEBUG] targetPkg: running [2025-09-06 13:59:03][357962502093594][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-06 13:59:03][357962502093594][247 ms][DEBUG] START check_boot_completed [2025-09-06 13:59:03][357962502093594][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:59:03][357962502093594][278 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 13:59:03][357962502093594][278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:59:03][357962502093594][326 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 13:59:03][357962502093594][326 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 13:59:03][357962502093594][326 ms][DEBUG] rawBody.length=1150 [2025-09-06 13:59:03][357962502093594][326 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502093594\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4213\"}'\'' -e'"" [2025-09-06 13:59:03][357962502093594][326 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:59:03][357962502093594][327 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502093594\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4213\"}'\'' -e'"" [2025-09-06 13:59:08][357962502093594][4793 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_108f0c8f-aadb-49ab-bfbf-78658aceb73d","id":"QR_108f0c8f-aadb-49ab-bfbf-78658aceb73d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:59:08][357962502093594][4949 ms][DEBUG] proc_open done in 4622 ms; code=255; res.len=3343 [2025-09-06 13:59:08][357962502093594][4949 ms][DEBUG] END runCmdUntilRes#1 in 4622 ms [2025-09-06 13:59:08][357962502093594][4949 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 13:59:10][357962502093594][1 ms][INFO] === Request start === [2025-09-06 13:59:10][357962502093594][1 ms][DEBUG] START check_scloud [2025-09-06 13:59:10][357962502093594][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 13:59:11][357962502093594][280 ms][DEBUG] SU: done in 278 ms; outu0_a118 18348 5009 24701168 229296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 13:59:11][357962502093594][280 ms][DEBUG] targetPkg: running [2025-09-06 13:59:11][357962502093594][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-06 13:59:11][357962502093594][280 ms][DEBUG] START check_boot_completed [2025-09-06 13:59:11][357962502093594][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 13:59:11][357962502093594][327 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 13:59:11][357962502093594][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 13:59:11][357962502093594][405 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 13:59:11][357962502093594][405 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 13:59:11][357962502093594][405 ms][DEBUG] rawBody.length=1160 [2025-09-06 13:59:11][357962502093594][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502093594\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9892\"}'\'' -e'"" [2025-09-06 13:59:11][357962502093594][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 13:59:11][357962502093594][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502093594\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9892\"}'\'' -e'"" [2025-09-06 13:59:16][357962502093594][5669 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0434dcff-4f17-4426-9fd6-ad4400c5742e","id":"QR_0434dcff-4f17-4426-9fd6-ad4400c5742e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 13:59:16][357962502093594][5825 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 13:59:16][357962502093594][5825 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-06 13:59:16][357962502093594][5825 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:01:04][356697214867239][0 ms][INFO] === Request start === [2025-09-06 14:01:04][356697214867239][1 ms][DEBUG] START check_scloud [2025-09-06 14:01:04][356697214867239][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:01:04][356697214867239][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18348 5009 24810928 240288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:01:04][356697214867239][308 ms][DEBUG] targetPkg: running [2025-09-06 14:01:04][356697214867239][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 14:01:04][356697214867239][308 ms][DEBUG] START check_boot_completed [2025-09-06 14:01:04][356697214867239][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:01:04][356697214867239][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:01:04][356697214867239][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:01:04][356697214867239][448 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 14:01:04][356697214867239][448 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 14:01:04][356697214867239][448 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:01:04][356697214867239][448 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697214867239\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3418\"}'\'' -e'"" [2025-09-06 14:01:04][356697214867239][448 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:01:04][356697214867239][448 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697214867239\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3418\"}'\'' -e'"" [2025-09-06 14:01:08][356697214867239][4322 ms][DEBUG] proc_open done in 3873 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 14:01:08][356697214867239][4322 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-06 14:01:08][356697214867239][4322 ms][WARN] Detected error: Process with pid 18348 either refused to load frida-agent, or terminated during injectionProcess with pid 18348 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 14:01:08][356697214867239][4322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 14:01:09][356697214867239][4619 ms][DEBUG] SU: done in 297 ms; outsystem 5430 5009 12867984 245900 ep_poll 0 S system_server\n [2025-09-06 14:01:09][356697214867239][4619 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 14:01:09][356697214867239][4759 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 14:01:09][356697214867239][4759 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 14:01:09][356697214867239][4759 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 14:01:09][356697214867239][4900 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 14:01:09][356697214867239][4900 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 14:01:09][356697214867239][5041 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 14:01:11][356697214867239][7055 ms][DEBUG] START check_boot_completed [2025-09-06 14:01:11][356697214867239][7055 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:01:11][356697214867239][7102 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:01:11][356697214867239][7103 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:01:11][356697214867239][7196 ms][DEBUG] SU: done in 93 ms; out [2025-09-06 14:01:11][356697214867239][7196 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-06 14:01:14][356697214867239][10211 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 14:01:14][356697214867239][10211 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697214867239\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3418\"}'\'' -e'"" [2025-09-06 14:01:20][356697214867239][16100 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3fed301-3d76-4ec0-942a-c85690fd93b1","id":"QR_e3fed301-3d76-4ec0-942a-c85690fd93b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:01:20][356697214867239][16256 ms][DEBUG] proc_open done in 6045 ms; code=255; res.len=3343 [2025-09-06 14:01:20][356697214867239][16257 ms][DEBUG] END runCmdUntilRes#2 in 6046 ms [2025-09-06 14:01:20][356697214867239][16257 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:01:24][356697214867239][1 ms][INFO] === Request start === [2025-09-06 14:01:24][356697214867239][1 ms][DEBUG] START check_scloud [2025-09-06 14:01:24][356697214867239][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:01:24][356697214867239][239 ms][DEBUG] SU: done in 238 ms; outu0_a118 19997 5009 23584288 124720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:01:24][356697214867239][240 ms][DEBUG] targetPkg: running [2025-09-06 14:01:24][356697214867239][240 ms][DEBUG] END check_scloud in 239 ms [2025-09-06 14:01:24][356697214867239][240 ms][DEBUG] START check_boot_completed [2025-09-06 14:01:24][356697214867239][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:01:24][356697214867239][286 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:01:24][356697214867239][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:01:24][356697214867239][334 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:01:24][356697214867239][334 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:01:24][356697214867239][334 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:01:24][356697214867239][334 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697214867239\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8304\"}'\'' -e'"" [2025-09-06 14:01:24][356697214867239][334 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:01:24][356697214867239][334 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697214867239\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8304\"}'\'' -e'"" [2025-09-06 14:01:28][356697214867239][4582 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e34fd64-bde9-46fa-9c7f-b856132951e6","id":"QR_7e34fd64-bde9-46fa-9c7f-b856132951e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:01:28][356697214867239][4738 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3343 [2025-09-06 14:01:28][356697214867239][4738 ms][DEBUG] END runCmdUntilRes#1 in 4404 ms [2025-09-06 14:01:28][356697214867239][4738 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:01:30][353204336661807][0 ms][INFO] === Request start === [2025-09-06 14:01:30][353204336661807][1 ms][DEBUG] START check_scloud [2025-09-06 14:01:30][353204336661807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:01:31][353204336661807][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 19997 5009 23750388 138300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:01:31][353204336661807][301 ms][DEBUG] targetPkg: running [2025-09-06 14:01:31][353204336661807][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 14:01:31][353204336661807][302 ms][DEBUG] START check_boot_completed [2025-09-06 14:01:31][353204336661807][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:01:31][353204336661807][347 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 14:01:31][353204336661807][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:01:31][353204336661807][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:01:31][353204336661807][394 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 14:01:31][353204336661807][394 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:01:31][353204336661807][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204336661807\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9025\"}'\'' -e'"" [2025-09-06 14:01:31][353204336661807][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:01:31][353204336661807][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204336661807\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9025\"}'\'' -e'"" [2025-09-06 14:01:34][353204336661807][3737 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4636f95-b7fe-4bb2-8404-9e0109d27b59","id":"QR_b4636f95-b7fe-4bb2-8404-9e0109d27b59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:01:34][353204336661807][3893 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-09-06 14:01:34][353204336661807][3893 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-09-06 14:01:34][353204336661807][3893 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:01:37][353204336661807][0 ms][INFO] === Request start === [2025-09-06 14:01:37][353204336661807][1 ms][DEBUG] START check_scloud [2025-09-06 14:01:37][353204336661807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:01:37][353204336661807][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 19997 5009 23862104 149976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:01:37][353204336661807][302 ms][DEBUG] targetPkg: running [2025-09-06 14:01:37][353204336661807][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 14:01:37][353204336661807][302 ms][DEBUG] START check_boot_completed [2025-09-06 14:01:37][353204336661807][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:01:37][353204336661807][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:01:37][353204336661807][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:01:37][353204336661807][442 ms][DEBUG] SU: done in 93 ms; out [2025-09-06 14:01:37][353204336661807][442 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 14:01:37][353204336661807][442 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:01:37][353204336661807][442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204336661807\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1484\"}'\'' -e'"" [2025-09-06 14:01:37][353204336661807][442 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:01:37][353204336661807][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204336661807\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1484\"}'\'' -e'"" [2025-09-06 14:01:42][353204336661807][4972 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c76f1b2a-b1aa-4eb5-9a54-b4b1fa1950f3","id":"QR_c76f1b2a-b1aa-4eb5-9a54-b4b1fa1950f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:01:42][353204336661807][5128 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-06 14:01:42][353204336661807][5128 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-06 14:01:42][353204336661807][5128 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:02:03][353994851324654][0 ms][INFO] === Request start === [2025-09-06 14:02:03][353994851324654][1 ms][DEBUG] START check_scloud [2025-09-06 14:02:03][353994851324654][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:02:04][353994851324654][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 19997 5009 23895748 161544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:02:04][353994851324654][308 ms][DEBUG] targetPkg: running [2025-09-06 14:02:04][353994851324654][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 14:02:04][353994851324654][308 ms][DEBUG] START check_boot_completed [2025-09-06 14:02:04][353994851324654][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:02:04][353994851324654][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:02:04][353994851324654][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:02:04][353994851324654][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:02:04][353994851324654][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:02:04][353994851324654][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:02:04][353994851324654][527 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1708\nsuccessfulTxPacketsPerSecond: 0.7700503519993096\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.18919340544810623\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1654\nsuccessfulRxPacketsPerSecond: 0.6804324231028382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:02:04][353994851324654][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:02:05][353994851324654][1886 ms][DEBUG] SU: done in 1358 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.526/305.526/305.526/0.000 ms\n [2025-09-06 14:02:05][353994851324654][1886 ms][DEBUG] check_internet: online [2025-09-06 14:02:05][353994851324654][1886 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:02:05][353994851324654][1886 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994851324654\",\"model\":\"SM-M346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6726\"}'\'' -e'"" [2025-09-06 14:02:05][353994851324654][1886 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:02:05][353994851324654][1886 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994851324654\",\"model\":\"SM-M346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6726\"}'\'' -e'"" [2025-09-06 14:02:09][353994851324654][5213 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7b6876e-2018-486b-a93e-fcaa7e7097ed","id":"QR_c7b6876e-2018-486b-a93e-fcaa7e7097ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:02:09][353994851324654][5369 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=3343 [2025-09-06 14:02:09][353994851324654][5369 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-09-06 14:02:09][353994851324654][5369 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:02:11][353994851324654][0 ms][INFO] === Request start === [2025-09-06 14:02:11][353994851324654][1 ms][DEBUG] START check_scloud [2025-09-06 14:02:11][353994851324654][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:02:11][353994851324654][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 19997 5009 24036108 172848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:02:11][353994851324654][300 ms][DEBUG] targetPkg: running [2025-09-06 14:02:11][353994851324654][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 14:02:11][353994851324654][300 ms][DEBUG] START check_boot_completed [2025-09-06 14:02:11][353994851324654][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:02:11][353994851324654][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:02:11][353994851324654][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:02:11][353994851324654][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:02:11][353994851324654][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:02:11][353994851324654][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:02:12][353994851324654][503 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1708\nsuccessfulTxPacketsPerSecond: 0.7700503519993096\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.18919340544810623\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1654\nsuccessfulRxPacketsPerSecond: 0.6804324231028382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:02:12][353994851324654][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:02:12][353994851324654][831 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.815/219.815/219.815/0.000 ms\n [2025-09-06 14:02:12][353994851324654][831 ms][DEBUG] check_internet: online [2025-09-06 14:02:12][353994851324654][831 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:02:12][353994851324654][831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994851324654\",\"model\":\"SM-M346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4836\"}'\'' -e'"" [2025-09-06 14:02:12][353994851324654][831 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:02:12][353994851324654][831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994851324654\",\"model\":\"SM-M346B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4836\"}'\'' -e'"" [2025-09-06 14:02:17][353994851324654][5454 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34c28dd8-e32c-4099-bb75-409340f9ce77","id":"QR_34c28dd8-e32c-4099-bb75-409340f9ce77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:02:17][353994851324654][5611 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-09-06 14:02:17][353994851324654][5611 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-06 14:02:17][353994851324654][5611 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:02:21][352397452767134][0 ms][INFO] === Request start === [2025-09-06 14:02:21][352397452767134][1 ms][DEBUG] START check_scloud [2025-09-06 14:02:21][352397452767134][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:02:21][352397452767134][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 19997 5009 24164372 183692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:02:21][352397452767134][271 ms][DEBUG] targetPkg: running [2025-09-06 14:02:21][352397452767134][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-06 14:02:21][352397452767134][271 ms][DEBUG] START check_boot_completed [2025-09-06 14:02:21][352397452767134][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:02:21][352397452767134][302 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:02:21][352397452767134][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:02:21][352397452767134][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:02:21][352397452767134][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:02:21][352397452767134][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:02:21][352397452767134][458 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1708\nsuccessfulTxPacketsPerSecond: 0.7700503519993096\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.18919340544810623\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1654\nsuccessfulRxPacketsPerSecond: 0.6804324231028382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:02:21][352397452767134][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:02:22][352397452767134][880 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=322 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 322.440/322.440/322.440/0.000 ms\n [2025-09-06 14:02:22][352397452767134][880 ms][DEBUG] check_internet: online [2025-09-06 14:02:22][352397452767134][880 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:02:22][352397452767134][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452767134\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9067\"}'\'' -e'"" [2025-09-06 14:02:22][352397452767134][880 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:02:22][352397452767134][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452767134\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9067\"}'\'' -e'"" [2025-09-06 14:02:25][352397452767134][4160 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a42ac78a-4efb-4e2f-99eb-990241c154b4","id":"QR_a42ac78a-4efb-4e2f-99eb-990241c154b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:02:25][352397452767134][4317 ms][DEBUG] proc_open done in 3436 ms; code=255; res.len=3343 [2025-09-06 14:02:25][352397452767134][4317 ms][DEBUG] END runCmdUntilRes#1 in 3436 ms [2025-09-06 14:02:25][352397452767134][4317 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:02:28][352397452767134][0 ms][INFO] === Request start === [2025-09-06 14:02:28][352397452767134][1 ms][DEBUG] START check_scloud [2025-09-06 14:02:28][352397452767134][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:02:28][352397452767134][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 19997 5009 24321272 195664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:02:28][352397452767134][310 ms][DEBUG] targetPkg: running [2025-09-06 14:02:28][352397452767134][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 14:02:28][352397452767134][310 ms][DEBUG] START check_boot_completed [2025-09-06 14:02:28][352397452767134][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:02:28][352397452767134][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:02:28][352397452767134][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:02:28][352397452767134][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:02:28][352397452767134][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:02:28][352397452767134][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:02:28][352397452767134][481 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1708\nsuccessfulTxPacketsPerSecond: 0.7700503519993096\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.18919340544810623\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1654\nsuccessfulRxPacketsPerSecond: 0.6804324231028382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:02:28][352397452767134][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:02:28][352397452767134][889 ms][DEBUG] SU: done in 408 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.480/316.480/316.480/0.000 ms\n [2025-09-06 14:02:28][352397452767134][889 ms][DEBUG] check_internet: online [2025-09-06 14:02:28][352397452767134][889 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:02:28][352397452767134][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452767134\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4784\"}'\'' -e'"" [2025-09-06 14:02:28][352397452767134][889 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:02:28][352397452767134][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452767134\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4784\"}'\'' -e'"" [2025-09-06 14:02:34][352397452767134][6902 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f43e74f0-9373-4b09-8a19-81f244e0d15d","id":"QR_f43e74f0-9373-4b09-8a19-81f244e0d15d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:02:35][352397452767134][7058 ms][DEBUG] proc_open done in 6168 ms; code=255; res.len=3343 [2025-09-06 14:02:35][352397452767134][7058 ms][DEBUG] END runCmdUntilRes#1 in 6168 ms [2025-09-06 14:02:35][352397452767134][7058 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:03:03][352887813419789][1 ms][INFO] === Request start === [2025-09-06 14:03:03][352887813419789][1 ms][DEBUG] START check_scloud [2025-09-06 14:03:03][352887813419789][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:03:03][352887813419789][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 19997 5009 24446532 207208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:03:03][352887813419789][290 ms][DEBUG] targetPkg: running [2025-09-06 14:03:03][352887813419789][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-06 14:03:03][352887813419789][290 ms][DEBUG] START check_boot_completed [2025-09-06 14:03:03][352887813419789][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:03:04][352887813419789][337 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:03:04][352887813419789][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:03:04][352887813419789][430 ms][DEBUG] SU: done in 93 ms; out [2025-09-06 14:03:04][352887813419789][430 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 14:03:04][352887813419789][430 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:03:04][352887813419789][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887813419789\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4437\"}'\'' -e'"" [2025-09-06 14:03:04][352887813419789][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:03:04][352887813419789][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887813419789\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4437\"}'\'' -e'"" [2025-09-06 14:03:08][352887813419789][4961 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fac5fb22-013b-4535-b03c-de5b3e1e4d3b","id":"QR_fac5fb22-013b-4535-b03c-de5b3e1e4d3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:03:08][352887813419789][5117 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-06 14:03:08][352887813419789][5117 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-06 14:03:08][352887813419789][5117 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:03:11][352887813419789][0 ms][INFO] === Request start === [2025-09-06 14:03:11][352887813419789][1 ms][DEBUG] START check_scloud [2025-09-06 14:03:11][352887813419789][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:03:11][352887813419789][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 19997 5009 24606404 218208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:03:11][352887813419789][307 ms][DEBUG] targetPkg: running [2025-09-06 14:03:11][352887813419789][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 14:03:11][352887813419789][307 ms][DEBUG] START check_boot_completed [2025-09-06 14:03:11][352887813419789][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:03:11][352887813419789][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:03:11][352887813419789][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:03:11][352887813419789][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:03:11][352887813419789][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:03:11][352887813419789][401 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:03:11][352887813419789][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887813419789\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9856\"}'\'' -e'"" [2025-09-06 14:03:11][352887813419789][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:03:11][352887813419789][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887813419789\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9856\"}'\'' -e'"" [2025-09-06 14:03:16][352887813419789][5259 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b7992b7-e7c9-431b-a4af-634678c6029e","id":"QR_5b7992b7-e7c9-431b-a4af-634678c6029e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:03:16][352887813419789][5415 ms][DEBUG] proc_open done in 5013 ms; code=255; res.len=3343 [2025-09-06 14:03:16][352887813419789][5415 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 14:03:16][352887813419789][5415 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:04:03][352600222059116][1 ms][INFO] === Request start === [2025-09-06 14:04:03][352600222059116][1 ms][DEBUG] START check_scloud [2025-09-06 14:04:03][352600222059116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:04:03][352600222059116][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 19997 5009 24725380 229016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:04:03][352600222059116][310 ms][DEBUG] targetPkg: running [2025-09-06 14:04:03][352600222059116][311 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 14:04:03][352600222059116][311 ms][DEBUG] START check_boot_completed [2025-09-06 14:04:03][352600222059116][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:04:03][352600222059116][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:04:03][352600222059116][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:04:03][352600222059116][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:04:03][352600222059116][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:04:03][352600222059116][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:04:03][352600222059116][514 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1955\nsuccessfulTxPacketsPerSecond: 1.9075421281065135\nretriedTxPackets: 354\nretriedTxPacketsPerSecond: 0.4865390853065196\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1862\nsuccessfulRxPacketsPerSecond: 1.606351265773906\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:04:03][352600222059116][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:04:04][352600222059116][951 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.615/282.615/282.615/0.000 ms\n [2025-09-06 14:04:04][352600222059116][951 ms][DEBUG] check_internet: online [2025-09-06 14:04:04][352600222059116][951 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:04:04][352600222059116][951 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600222059116\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9136\"}'\'' -e'"" [2025-09-06 14:04:04][352600222059116][951 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:04:04][352600222059116][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600222059116\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9136\"}'\'' -e'"" [2025-09-06 14:04:09][352600222059116][6028 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2beb3a7d-a5fd-4ae4-9e6b-2a5a67a071ad","id":"QR_2beb3a7d-a5fd-4ae4-9e6b-2a5a67a071ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:04:09][352600222059116][6184 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3343 [2025-09-06 14:04:09][352600222059116][6184 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-06 14:04:09][352600222059116][6184 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:04:11][352600222059116][0 ms][INFO] === Request start === [2025-09-06 14:04:11][352600222059116][1 ms][DEBUG] START check_scloud [2025-09-06 14:04:11][352600222059116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:04:12][352600222059116][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 19997 5009 24861836 241160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:04:12][352600222059116][325 ms][DEBUG] targetPkg: running [2025-09-06 14:04:12][352600222059116][325 ms][DEBUG] END check_scloud in 325 ms [2025-09-06 14:04:12][352600222059116][325 ms][DEBUG] START check_boot_completed [2025-09-06 14:04:12][352600222059116][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:04:12][352600222059116][372 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:04:12][352600222059116][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:04:12][352600222059116][419 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:04:12][352600222059116][419 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:04:12][352600222059116][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:04:12][352600222059116][544 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30815 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1955\nsuccessfulTxPacketsPerSecond: 1.9075421281065135\nretriedTxPackets: 354\nretriedTxPacketsPerSecond: 0.4865390853065196\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1862\nsuccessfulRxPacketsPerSecond: 1.606351265773906\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:04:12][352600222059116][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:04:12][352600222059116][966 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=308 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 308.283/308.283/308.283/0.000 ms\n [2025-09-06 14:04:12][352600222059116][966 ms][DEBUG] check_internet: online [2025-09-06 14:04:12][352600222059116][966 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:04:12][352600222059116][966 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600222059116\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1585\"}'\'' -e'"" [2025-09-06 14:04:12][352600222059116][966 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:04:12][352600222059116][966 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600222059116\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1585\"}'\'' -e'"" [2025-09-06 14:04:16][352600222059116][4933 ms][DEBUG] proc_open done in 3967 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 14:04:16][352600222059116][4933 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-06 14:04:16][352600222059116][4933 ms][WARN] Detected error: Process with pid 19997 either refused to load frida-agent, or terminated during injectionProcess with pid 19997 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 14:04:16][352600222059116][4933 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 14:04:17][352600222059116][5230 ms][DEBUG] SU: done in 297 ms; outsystem 5430 5009 12885420 220828 ep_poll 0 S system_server\n [2025-09-06 14:04:17][352600222059116][5230 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 14:04:17][352600222059116][5371 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 14:04:17][352600222059116][5371 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 14:04:17][352600222059116][5371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 14:04:17][352600222059116][5496 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 14:04:17][352600222059116][5496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 14:04:17][352600222059116][5668 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 14:04:19][352600222059116][7682 ms][DEBUG] START check_boot_completed [2025-09-06 14:04:19][352600222059116][7683 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:04:19][352600222059116][7729 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:04:19][352600222059116][7729 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:04:19][352600222059116][7777 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:04:19][352600222059116][7777 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:04:22][352600222059116][10791 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 14:04:22][352600222059116][10791 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600222059116\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1585\"}'\'' -e'"" [2025-09-06 14:04:27][352600222059116][15524 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f683a90a-5a48-426e-9524-322e2bfde4a7","id":"QR_f683a90a-5a48-426e-9524-322e2bfde4a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:04:27][352600222059116][15681 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 14:04:27][352600222059116][15681 ms][DEBUG] END runCmdUntilRes#2 in 4889 ms [2025-09-06 14:04:27][352600222059116][15681 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:04:31][358141430997429][0 ms][INFO] === Request start === [2025-09-06 14:04:31][358141430997429][1 ms][DEBUG] START check_scloud [2025-09-06 14:04:31][358141430997429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:04:32][358141430997429][356 ms][DEBUG] SU: done in 355 ms; out [2025-09-06 14:04:32][358141430997429][356 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 14:04:32][358141430997429][403 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 14:04:32][358141430997429][403 ms][DEBUG] check_devices: device found [2025-09-06 14:04:32][358141430997429][403 ms][WARN] targetPkg: not running, restarting [2025-09-06 14:04:32][358141430997429][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 14:04:32][358141430997429][668 ms][DEBUG] SU: done in 266 ms; out [2025-09-06 14:04:32][358141430997429][669 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 14:04:32][358141430997429][825 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 14:04:34][358141430997429][2839 ms][DEBUG] END check_scloud in 2839 ms [2025-09-06 14:04:34][358141430997429][2840 ms][DEBUG] START check_boot_completed [2025-09-06 14:04:34][358141430997429][2840 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:04:34][358141430997429][2886 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:04:34][358141430997429][2886 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:04:34][358141430997429][2934 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 14:04:34][358141430997429][2934 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 14:04:34][358141430997429][2934 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:04:34][358141430997429][3058 ms][DEBUG] SU: done in 124 ms; out [2025-09-06 14:05:03][358141430997429][0 ms][INFO] === Request start === [2025-09-06 14:05:03][358141430997429][1 ms][DEBUG] START check_scloud [2025-09-06 14:05:03][358141430997429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:05:04][358141430997429][356 ms][DEBUG] SU: done in 355 ms; out [2025-09-06 14:05:04][358141430997429][356 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 14:05:04][358141430997429][403 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 14:05:04][358141430997429][403 ms][DEBUG] check_devices: device found [2025-09-06 14:05:04][358141430997429][403 ms][WARN] targetPkg: not running, restarting [2025-09-06 14:05:04][358141430997429][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 14:05:04][358141430997429][543 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 14:05:04][358141430997429][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 14:05:04][358141430997429][700 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 14:05:06][358141430997429][2715 ms][DEBUG] END check_scloud in 2714 ms [2025-09-06 14:05:06][358141430997429][2715 ms][DEBUG] START check_boot_completed [2025-09-06 14:05:06][358141430997429][2715 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:05:06][358141430997429][2762 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:05:06][358141430997429][2762 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:05:06][358141430997429][2824 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:05:06][358141430997429][2824 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:05:06][358141430997429][2824 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:05:06][358141430997429][2824 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430997429\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1724\"}'\'' -e'"" [2025-09-06 14:05:06][358141430997429][2824 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:05:06][358141430997429][2824 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430997429\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1724\"}'\'' -e'"" [2025-09-06 14:05:11][358141430997429][7854 ms][DEBUG] proc_open done in 5030 ms (timeout); code=4; out.len=0 err.len=19 [2025-09-06 14:05:11][358141430997429][7854 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-06 14:05:11][358141430997429][7854 ms][WARN] Detected error: Process not foundProcess not found\r\n [2025-09-06 14:05:11][358141430997429][7855 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 14:05:12][358141430997429][8495 ms][DEBUG] SU: done in 640 ms; outsystem 22396 22065 13063204 638824 ep_poll 0 S system_server\n [2025-09-06 14:05:12][358141430997429][8495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 14:05:12][358141430997429][8745 ms][DEBUG] SU: done in 250 ms; out [2025-09-06 14:05:12][358141430997429][8745 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 14:05:12][358141430997429][8745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 14:05:12][358141430997429][9151 ms][DEBUG] SU: done in 406 ms; out [2025-09-06 14:05:12][358141430997429][9151 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 14:05:13][358141430997429][9541 ms][DEBUG] SU: done in 390 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 14:05:15][358141430997429][11556 ms][DEBUG] START check_boot_completed [2025-09-06 14:05:15][358141430997429][11556 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:05:15][358141430997429][11603 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:05:15][358141430997429][11603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:05:15][358141430997429][11760 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 14:05:15][358141430997429][11760 ms][DEBUG] END check_boot_completed in 203 ms [2025-09-06 14:05:18][358141430997429][14774 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 14:05:18][358141430997429][14774 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430997429\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1724\"}'\'' -e'"" [2025-09-06 14:05:24][358141430997429][20664 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5edd64c-8542-4f1d-9c92-8b8ff34540e2","id":"QR_d5edd64c-8542-4f1d-9c92-8b8ff34540e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:05:24][358141430997429][20820 ms][DEBUG] proc_open done in 6045 ms; code=255; res.len=3343 [2025-09-06 14:05:24][358141430997429][20820 ms][DEBUG] END runCmdUntilRes#2 in 6046 ms [2025-09-06 14:05:24][358141430997429][20820 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:05:26][358141430997429][0 ms][INFO] === Request start === [2025-09-06 14:05:26][358141430997429][1 ms][DEBUG] START check_scloud [2025-09-06 14:05:26][358141430997429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:05:27][358141430997429][378 ms][DEBUG] SU: done in 377 ms; outu0_a118 25707 22065 23871204 107728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:05:27][358141430997429][378 ms][DEBUG] targetPkg: running [2025-09-06 14:05:27][358141430997429][378 ms][DEBUG] END check_scloud in 377 ms [2025-09-06 14:05:27][358141430997429][378 ms][DEBUG] START check_boot_completed [2025-09-06 14:05:27][358141430997429][378 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:05:27][358141430997429][425 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:05:27][358141430997429][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:05:27][358141430997429][487 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:05:27][358141430997429][487 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:05:27][358141430997429][487 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:05:27][358141430997429][487 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430997429\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8809\"}'\'' -e'"" [2025-09-06 14:05:27][358141430997429][487 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:05:27][358141430997429][487 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430997429\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8809\"}'\'' -e'"" [2025-09-06 14:05:33][358141430997429][6579 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f12c1d20-c318-4da7-b6fa-a9e612b52cfe","id":"QR_f12c1d20-c318-4da7-b6fa-a9e612b52cfe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:05:33][358141430997429][6735 ms][DEBUG] proc_open done in 6248 ms; code=255; res.len=3343 [2025-09-06 14:05:33][358141430997429][6735 ms][DEBUG] END runCmdUntilRes#1 in 6248 ms [2025-09-06 14:05:33][358141430997429][6735 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:06:04][353173651267005][1 ms][INFO] === Request start === [2025-09-06 14:06:04][353173651267005][1 ms][DEBUG] START check_scloud [2025-09-06 14:06:04][353173651267005][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:06:04][353173651267005][336 ms][DEBUG] SU: done in 335 ms; outu0_a118 25707 22065 23933788 66384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:06:04][353173651267005][336 ms][DEBUG] targetPkg: running [2025-09-06 14:06:04][353173651267005][336 ms][DEBUG] END check_scloud in 335 ms [2025-09-06 14:06:04][353173651267005][336 ms][DEBUG] START check_boot_completed [2025-09-06 14:06:04][353173651267005][336 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:06:04][353173651267005][383 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:06:04][353173651267005][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:06:04][353173651267005][445 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 14:06:04][353173651267005][445 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:06:04][353173651267005][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:06:04][353173651267005][649 ms][DEBUG] SU: done in 203 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 602\nsuccessfulTxPacketsPerSecond: 21.121774305746662\nretriedTxPackets: 86\nretriedTxPacketsPerSecond: 3.3216152873973965\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 682\nsuccessfulRxPacketsPerSecond: 31.14681933267144\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:06:04][353173651267005][649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:06:05][353173651267005][1539 ms][DEBUG] SU: done in 890 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=289 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 289.799/289.799/289.799/0.000 ms\n [2025-09-06 14:06:05][353173651267005][1539 ms][DEBUG] check_internet: online [2025-09-06 14:06:05][353173651267005][1539 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:06:05][353173651267005][1539 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173651267005\",\"model\":\"SM-G781V\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9963\"}'\'' -e'"" [2025-09-06 14:06:05][353173651267005][1540 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:06:05][353173651267005][1540 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173651267005\",\"model\":\"SM-G781V\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9963\"}'\'' -e'"" [2025-09-06 14:06:11][353173651267005][7600 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b30b652c-4fba-4110-9576-2b627e2b9db8","id":"QR_b30b652c-4fba-4110-9576-2b627e2b9db8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:06:12][353173651267005][7756 ms][DEBUG] proc_open done in 6216 ms; code=255; res.len=3343 [2025-09-06 14:06:12][353173651267005][7756 ms][DEBUG] END runCmdUntilRes#1 in 6216 ms [2025-09-06 14:06:12][353173651267005][7756 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:06:15][353173651267005][0 ms][INFO] === Request start === [2025-09-06 14:06:15][353173651267005][1 ms][DEBUG] START check_scloud [2025-09-06 14:06:15][353173651267005][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:06:16][353173651267005][354 ms][DEBUG] SU: done in 353 ms; outu0_a118 25707 22065 24092388 77708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:06:16][353173651267005][354 ms][DEBUG] targetPkg: running [2025-09-06 14:06:16][353173651267005][354 ms][DEBUG] END check_scloud in 353 ms [2025-09-06 14:06:16][353173651267005][354 ms][DEBUG] START check_boot_completed [2025-09-06 14:06:16][353173651267005][354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:06:16][353173651267005][385 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:06:16][353173651267005][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:06:16][353173651267005][432 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:06:16][353173651267005][432 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:06:16][353173651267005][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:06:16][353173651267005][557 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 672\nsuccessfulTxPacketsPerSecond: 7.457679976307791\nretriedTxPackets: 111\nretriedTxPacketsPerSecond: 2.515582022134673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 747\nsuccessfulRxPacketsPerSecond: 7.328968618161876\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:06:16][353173651267005][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:06:16][353173651267005][963 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.072/229.072/229.072/0.000 ms\n [2025-09-06 14:06:16][353173651267005][963 ms][DEBUG] check_internet: online [2025-09-06 14:06:16][353173651267005][963 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:06:16][353173651267005][963 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173651267005\",\"model\":\"SM-G781V\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1502\"}'\'' -e'"" [2025-09-06 14:06:16][353173651267005][963 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:06:16][353173651267005][963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353173651267005\",\"model\":\"SM-G781V\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1502\"}'\'' -e'"" [2025-09-06 14:06:20][353173651267005][5243 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13850b0e-5088-4646-98e1-2c70f054004d","id":"QR_13850b0e-5088-4646-98e1-2c70f054004d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:06:21][353173651267005][5400 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-09-06 14:06:21][353173651267005][5400 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-09-06 14:06:21][353173651267005][5400 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:06:23][357674438086929][0 ms][INFO] === Request start === [2025-09-06 14:06:23][357674438086929][1 ms][DEBUG] START check_scloud [2025-09-06 14:06:23][357674438086929][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:06:23][357674438086929][335 ms][DEBUG] SU: done in 334 ms; outu0_a118 25707 22065 24273772 94444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:06:23][357674438086929][335 ms][DEBUG] targetPkg: running [2025-09-06 14:06:23][357674438086929][335 ms][DEBUG] END check_scloud in 334 ms [2025-09-06 14:06:23][357674438086929][335 ms][DEBUG] START check_boot_completed [2025-09-06 14:06:23][357674438086929][335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:06:23][357674438086929][381 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:06:23][357674438086929][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:06:23][357674438086929][428 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:06:23][357674438086929][428 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:06:23][357674438086929][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:06:23][357674438086929][540 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 672\nsuccessfulTxPacketsPerSecond: 7.457679976307791\nretriedTxPackets: 111\nretriedTxPacketsPerSecond: 2.515582022134673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 747\nsuccessfulRxPacketsPerSecond: 7.328968618161876\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:06:23][357674438086929][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:06:23][357674438086929][899 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.751/219.751/219.751/0.000 ms\n [2025-09-06 14:06:23][357674438086929][899 ms][DEBUG] check_internet: online [2025-09-06 14:06:23][357674438086929][899 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:06:23][357674438086929][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438086929\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3452\"}'\'' -e'"" [2025-09-06 14:06:23][357674438086929][899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:06:23][357674438086929][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438086929\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3452\"}'\'' -e'"" [2025-09-06 14:06:28][357674438086929][5365 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ef5d34bc-b927-4ada-8068-d09e532d8604","id":"QR_ef5d34bc-b927-4ada-8068-d09e532d8604","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:06:28][357674438086929][5521 ms][DEBUG] proc_open done in 4622 ms; code=255; res.len=3343 [2025-09-06 14:06:28][357674438086929][5521 ms][DEBUG] END runCmdUntilRes#1 in 4622 ms [2025-09-06 14:06:28][357674438086929][5521 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:06:30][357674438086929][0 ms][INFO] === Request start === [2025-09-06 14:06:30][357674438086929][1 ms][DEBUG] START check_scloud [2025-09-06 14:06:30][357674438086929][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:06:31][357674438086929][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 25707 22065 24419528 97716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:06:31][357674438086929][283 ms][DEBUG] targetPkg: running [2025-09-06 14:06:31][357674438086929][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-06 14:06:31][357674438086929][283 ms][DEBUG] START check_boot_completed [2025-09-06 14:06:31][357674438086929][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:06:31][357674438086929][329 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:06:31][357674438086929][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:06:31][357674438086929][392 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 14:06:31][357674438086929][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:06:31][357674438086929][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:06:31][357674438086929][501 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 672\nsuccessfulTxPacketsPerSecond: 7.457679976307791\nretriedTxPackets: 111\nretriedTxPacketsPerSecond: 2.515582022134673\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 747\nsuccessfulRxPacketsPerSecond: 7.328968618161876\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:06:31][357674438086929][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:06:31][357674438086929][923 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.080/304.080/304.080/0.000 ms\n [2025-09-06 14:06:31][357674438086929][923 ms][DEBUG] check_internet: online [2025-09-06 14:06:31][357674438086929][923 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:06:31][357674438086929][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438086929\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3761\"}'\'' -e'"" [2025-09-06 14:06:31][357674438086929][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:06:31][357674438086929][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438086929\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3761\"}'\'' -e'"" [2025-09-06 14:06:36][357674438086929][5969 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48eea54a-d90b-41c5-a933-4851a53c8968","id":"QR_48eea54a-d90b-41c5-a933-4851a53c8968","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:06:37][357674438086929][6125 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-06 14:06:37][357674438086929][6125 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-06 14:06:37][357674438086929][6125 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:07:04][350940412303656][0 ms][INFO] === Request start === [2025-09-06 14:07:04][350940412303656][1 ms][DEBUG] START check_scloud [2025-09-06 14:07:04][350940412303656][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:07:05][350940412303656][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 25707 22065 24498532 102628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:07:05][350940412303656][322 ms][DEBUG] targetPkg: running [2025-09-06 14:07:05][350940412303656][322 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 14:07:05][350940412303656][322 ms][DEBUG] START check_boot_completed [2025-09-06 14:07:05][350940412303656][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:07:05][350940412303656][367 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 14:07:05][350940412303656][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:07:05][350940412303656][416 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 14:07:05][350940412303656][416 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:07:05][350940412303656][416 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:07:05][350940412303656][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940412303656\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7224\"}'\'' -e'"" [2025-09-06 14:07:05][350940412303656][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:07:05][350940412303656][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940412303656\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7224\"}'\'' -e'"" [2025-09-06 14:07:10][350940412303656][5632 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ced8a3a-cc84-44cf-bf9e-943e6baefc6f","id":"QR_6ced8a3a-cc84-44cf-bf9e-943e6baefc6f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:07:10][350940412303656][5788 ms][DEBUG] proc_open done in 5371 ms; code=255; res.len=3343 [2025-09-06 14:07:10][350940412303656][5788 ms][DEBUG] END runCmdUntilRes#1 in 5371 ms [2025-09-06 14:07:10][350940412303656][5788 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:07:14][350940412303656][0 ms][INFO] === Request start === [2025-09-06 14:07:14][350940412303656][0 ms][DEBUG] START check_scloud [2025-09-06 14:07:14][350940412303656][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:07:14][350940412303656][330 ms][DEBUG] SU: done in 330 ms; outu0_a118 25707 22065 24659500 113652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:07:14][350940412303656][330 ms][DEBUG] targetPkg: running [2025-09-06 14:07:14][350940412303656][330 ms][DEBUG] END check_scloud in 330 ms [2025-09-06 14:07:14][350940412303656][330 ms][DEBUG] START check_boot_completed [2025-09-06 14:07:14][350940412303656][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:07:14][350940412303656][362 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:07:14][350940412303656][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:07:14][350940412303656][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:07:14][350940412303656][409 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:07:14][350940412303656][409 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:07:14][350940412303656][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940412303656\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2694\"}'\'' -e'"" [2025-09-06 14:07:14][350940412303656][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:07:14][350940412303656][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940412303656\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2694\"}'\'' -e'"" [2025-09-06 14:07:17][350940412303656][3876 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5845de0f-7816-442b-bf84-7746767e85f1","id":"QR_5845de0f-7816-442b-bf84-7746767e85f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:07:18][350940412303656][4033 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-06 14:07:18][350940412303656][4033 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-06 14:07:18][350940412303656][4033 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:09:03][350616255070160][1 ms][INFO] === Request start === [2025-09-06 14:09:03][350616255070160][1 ms][DEBUG] START check_scloud [2025-09-06 14:09:03][350616255070160][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:09:03][350616255070160][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 25707 22065 24759776 127236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:09:03][350616255070160][321 ms][DEBUG] targetPkg: running [2025-09-06 14:09:03][350616255070160][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 14:09:03][350616255070160][321 ms][DEBUG] START check_boot_completed [2025-09-06 14:09:03][350616255070160][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:09:03][350616255070160][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:09:03][350616255070160][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:09:03][350616255070160][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:09:03][350616255070160][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:09:03][350616255070160][415 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:09:03][350616255070160][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255070160\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2203\"}'\'' -e'"" [2025-09-06 14:09:03][350616255070160][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:09:03][350616255070160][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255070160\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2203\"}'\'' -e'"" [2025-09-06 14:09:08][350616255070160][5132 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf18e429-e385-4e8e-9767-c74ebe93d4fd","id":"QR_cf18e429-e385-4e8e-9767-c74ebe93d4fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:09:08][350616255070160][5288 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-09-06 14:09:08][350616255070160][5288 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-09-06 14:09:08][350616255070160][5288 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:09:11][350616255070160][0 ms][INFO] === Request start === [2025-09-06 14:09:11][350616255070160][1 ms][DEBUG] START check_scloud [2025-09-06 14:09:11][350616255070160][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:09:11][350616255070160][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 25707 22065 24935016 130968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:09:11][350616255070160][322 ms][DEBUG] targetPkg: running [2025-09-06 14:09:11][350616255070160][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-06 14:09:11][350616255070160][322 ms][DEBUG] START check_boot_completed [2025-09-06 14:09:11][350616255070160][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:09:11][350616255070160][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:09:11][350616255070160][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:09:11][350616255070160][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:09:11][350616255070160][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:09:11][350616255070160][431 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:09:11][350616255070160][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255070160\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7461\"}'\'' -e'"" [2025-09-06 14:09:11][350616255070160][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:09:11][350616255070160][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255070160\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7461\"}'\'' -e'"" [2025-09-06 14:09:16][350616255070160][5664 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3404010f-f792-4512-8985-a36ac6fc0496","id":"QR_3404010f-f792-4512-8985-a36ac6fc0496","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:09:16][350616255070160][5820 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-06 14:09:16][350616255070160][5820 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-06 14:09:16][350616255070160][5820 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:12:03][352288966894995][0 ms][INFO] === Request start === [2025-09-06 14:12:03][352288966894995][0 ms][DEBUG] START check_scloud [2025-09-06 14:12:03][352288966894995][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:12:04][352288966894995][255 ms][DEBUG] SU: done in 255 ms; outu0_a118 25707 22065 25031456 142464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:12:04][352288966894995][255 ms][DEBUG] targetPkg: running [2025-09-06 14:12:04][352288966894995][255 ms][DEBUG] END check_scloud in 255 ms [2025-09-06 14:12:04][352288966894995][255 ms][DEBUG] START check_boot_completed [2025-09-06 14:12:04][352288966894995][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:12:04][352288966894995][286 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:12:04][352288966894995][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:12:04][352288966894995][333 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:12:04][352288966894995][333 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:12:04][352288966894995][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:12:04][352288966894995][443 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1039\nsuccessfulTxPacketsPerSecond: 1.520140830485658\nretriedTxPackets: 193\nretriedTxPacketsPerSecond: 0.3396499948224086\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1075\nsuccessfulRxPacketsPerSecond: 1.3585999792896344\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:12:04][352288966894995][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:12:05][352288966894995][1958 ms][DEBUG] SU: done in 1515 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.223/300.223/300.223/0.000 ms\n [2025-09-06 14:12:05][352288966894995][1958 ms][DEBUG] check_internet: online [2025-09-06 14:12:05][352288966894995][1958 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:12:05][352288966894995][1958 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966894995\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3951\"}'\'' -e'"" [2025-09-06 14:12:05][352288966894995][1958 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:12:05][352288966894995][1958 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966894995\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3951\"}'\'' -e'"" [2025-09-06 14:12:09][352288966894995][6066 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b23a1c1-c955-4533-a18e-1d2a4c06a11d","id":"QR_9b23a1c1-c955-4533-a18e-1d2a4c06a11d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:12:10][352288966894995][6222 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-09-06 14:12:10][352288966894995][6222 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-09-06 14:12:10][352288966894995][6223 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:12:12][352288966894995][0 ms][INFO] === Request start === [2025-09-06 14:12:12][352288966894995][1 ms][DEBUG] START check_scloud [2025-09-06 14:12:12][352288966894995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:12:12][352288966894995][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 25707 22065 25198504 153308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:12:12][352288966894995][276 ms][DEBUG] targetPkg: running [2025-09-06 14:12:12][352288966894995][276 ms][DEBUG] END check_scloud in 276 ms [2025-09-06 14:12:12][352288966894995][276 ms][DEBUG] START check_boot_completed [2025-09-06 14:12:12][352288966894995][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:12:12][352288966894995][322 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:12:12][352288966894995][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:12:12][352288966894995][385 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:12:12][352288966894995][385 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 14:12:12][352288966894995][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:12:13][352288966894995][510 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1039\nsuccessfulTxPacketsPerSecond: 1.520140830485658\nretriedTxPackets: 193\nretriedTxPacketsPerSecond: 0.3396499948224086\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1075\nsuccessfulRxPacketsPerSecond: 1.3585999792896344\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:12:13][352288966894995][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:12:13][352288966894995][963 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.027/341.027/341.027/0.000 ms\n [2025-09-06 14:12:13][352288966894995][963 ms][DEBUG] check_internet: online [2025-09-06 14:12:13][352288966894995][963 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:12:13][352288966894995][963 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966894995\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6570\"}'\'' -e'"" [2025-09-06 14:12:13][352288966894995][963 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:12:13][352288966894995][963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966894995\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6570\"}'\'' -e'"" [2025-09-06 14:12:17][352288966894995][5274 ms][DEBUG] proc_open done in 4311 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 14:12:17][352288966894995][5274 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-06 14:12:17][352288966894995][5274 ms][WARN] Detected error: Process with pid 25707 either refused to load frida-agent, or terminated during injectionProcess with pid 25707 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 14:12:17][352288966894995][5274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 14:12:18][352288966894995][5586 ms][DEBUG] SU: done in 312 ms; outsystem 22396 22065 12945336 571080 ep_poll 0 S system_server\n [2025-09-06 14:12:18][352288966894995][5587 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 14:12:18][352288966894995][5727 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 14:12:18][352288966894995][5727 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 14:12:18][352288966894995][5727 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 14:12:18][352288966894995][5868 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 14:12:18][352288966894995][5868 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 14:12:18][352288966894995][6055 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 14:12:20][352288966894995][8070 ms][DEBUG] START check_boot_completed [2025-09-06 14:12:20][352288966894995][8070 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:12:20][352288966894995][8101 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:12:20][352288966894995][8101 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:12:20][352288966894995][8148 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:12:20][352288966894995][8148 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:12:23][352288966894995][11163 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 14:12:23][352288966894995][11163 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966894995\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6570\"}'\'' -e'"" [2025-09-06 14:12:28][352288966894995][16037 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_777766af-263f-4a36-9f18-f0ba18569f3f","id":"QR_777766af-263f-4a36-9f18-f0ba18569f3f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:12:28][352288966894995][16193 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-06 14:12:28][352288966894995][16193 ms][DEBUG] END runCmdUntilRes#2 in 5030 ms [2025-09-06 14:12:28][352288966894995][16194 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:13:03][351272333761625][0 ms][INFO] === Request start === [2025-09-06 14:13:03][351272333761625][0 ms][DEBUG] START check_scloud [2025-09-06 14:13:03][351272333761625][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:13:03][351272333761625][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 4171 22065 23781976 128552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:13:03][351272333761625][311 ms][DEBUG] targetPkg: running [2025-09-06 14:13:03][351272333761625][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 14:13:03][351272333761625][311 ms][DEBUG] START check_boot_completed [2025-09-06 14:13:03][351272333761625][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:13:03][351272333761625][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:13:03][351272333761625][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:13:03][351272333761625][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:13:03][351272333761625][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:13:03][351272333761625][405 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:13:03][351272333761625][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333761625\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4815\"}'\'' -e'"" [2025-09-06 14:13:03][351272333761625][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:13:03][351272333761625][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333761625\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4815\"}'\'' -e'"" [2025-09-06 14:13:07][351272333761625][3779 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9e99315-dd00-43e8-83a2-f4f2c083a95a","id":"QR_c9e99315-dd00-43e8-83a2-f4f2c083a95a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:13:07][351272333761625][3935 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=3343 [2025-09-06 14:13:07][351272333761625][3935 ms][DEBUG] END runCmdUntilRes#1 in 3531 ms [2025-09-06 14:13:07][351272333761625][3936 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:13:09][351272333761625][0 ms][INFO] === Request start === [2025-09-06 14:13:09][351272333761625][1 ms][DEBUG] START check_scloud [2025-09-06 14:13:09][351272333761625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:13:09][351272333761625][265 ms][DEBUG] SU: done in 265 ms; outu0_a118 4171 22065 23934624 139088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:13:09][351272333761625][265 ms][DEBUG] targetPkg: running [2025-09-06 14:13:09][351272333761625][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-06 14:13:09][351272333761625][266 ms][DEBUG] START check_boot_completed [2025-09-06 14:13:09][351272333761625][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:13:09][351272333761625][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:13:09][351272333761625][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:13:09][351272333761625][359 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:13:09][351272333761625][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:13:09][351272333761625][359 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:13:09][351272333761625][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333761625\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5046\"}'\'' -e'"" [2025-09-06 14:13:09][351272333761625][359 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:13:09][351272333761625][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333761625\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5046\"}'\'' -e'"" [2025-09-06 14:13:14][351272333761625][5123 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a08a860d-fd9d-43fc-b4d2-e0580c32a38c","id":"QR_a08a860d-fd9d-43fc-b4d2-e0580c32a38c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:13:14][351272333761625][5280 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-06 14:13:14][351272333761625][5280 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-06 14:13:14][351272333761625][5280 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:17:05][356126213395752][1 ms][INFO] === Request start === [2025-09-06 14:17:05][356126213395752][1 ms][DEBUG] START check_scloud [2025-09-06 14:17:05][356126213395752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:17:05][356126213395752][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 4171 22065 24071500 151060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:17:05][356126213395752][297 ms][DEBUG] targetPkg: running [2025-09-06 14:17:05][356126213395752][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 14:17:05][356126213395752][297 ms][DEBUG] START check_boot_completed [2025-09-06 14:17:05][356126213395752][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:17:05][356126213395752][328 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:17:05][356126213395752][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:17:05][356126213395752][391 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 14:17:05][356126213395752][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:17:05][356126213395752][391 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:17:05][356126213395752][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356126213395752\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6345\"}'\'' -e'"" [2025-09-06 14:17:05][356126213395752][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:17:05][356126213395752][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356126213395752\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6345\"}'\'' -e'"" [2025-09-06 14:17:11][356126213395752][6561 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12d75dcd-acae-453c-b09c-39005c203b4d","id":"QR_12d75dcd-acae-453c-b09c-39005c203b4d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:17:11][356126213395752][6717 ms][DEBUG] proc_open done in 6326 ms; code=255; res.len=3343 [2025-09-06 14:17:11][356126213395752][6717 ms][DEBUG] END runCmdUntilRes#1 in 6326 ms [2025-09-06 14:17:11][356126213395752][6717 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:17:15][356126213395752][0 ms][INFO] === Request start === [2025-09-06 14:17:15][356126213395752][1 ms][DEBUG] START check_scloud [2025-09-06 14:17:15][356126213395752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:17:15][356126213395752][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 4171 22065 24213972 162168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:17:15][356126213395752][311 ms][DEBUG] targetPkg: running [2025-09-06 14:17:15][356126213395752][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 14:17:15][356126213395752][311 ms][DEBUG] START check_boot_completed [2025-09-06 14:17:15][356126213395752][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:17:15][356126213395752][341 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 14:17:15][356126213395752][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:17:15][356126213395752][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:17:15][356126213395752][388 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 14:17:15][356126213395752][388 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:17:15][356126213395752][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356126213395752\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3930\"}'\'' -e'"" [2025-09-06 14:17:15][356126213395752][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:17:15][356126213395752][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356126213395752\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3930\"}'\'' -e'"" [2025-09-06 14:17:19][356126213395752][4324 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_606f00c9-e7f6-4cee-a26a-b9eb16870dbb","id":"QR_606f00c9-e7f6-4cee-a26a-b9eb16870dbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:17:19][356126213395752][4481 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-09-06 14:17:19][356126213395752][4481 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-09-06 14:17:19][356126213395752][4481 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:18:04][352938776599198][0 ms][INFO] === Request start === [2025-09-06 14:18:04][352938776599198][1 ms][DEBUG] START check_scloud [2025-09-06 14:18:04][352938776599198][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:18:04][352938776599198][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 4171 22065 24336020 173208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:18:04][352938776599198][306 ms][DEBUG] targetPkg: running [2025-09-06 14:18:04][352938776599198][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 14:18:04][352938776599198][306 ms][DEBUG] START check_boot_completed [2025-09-06 14:18:04][352938776599198][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:18:04][352938776599198][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:18:04][352938776599198][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:18:04][352938776599198][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:18:04][352938776599198][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:18:04][352938776599198][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:18:04][352938776599198][494 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1230\nsuccessfulTxPacketsPerSecond: 0.6358337244875879\nretriedTxPackets: 245\nretriedTxPacketsPerSecond: 0.17310656373484068\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1241\nsuccessfulRxPacketsPerSecond: 0.5526094149996837\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:18:04][352938776599198][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:18:06][352938776599198][1900 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.304/299.304/299.304/0.000 ms\n [2025-09-06 14:18:06][352938776599198][1900 ms][DEBUG] check_internet: online [2025-09-06 14:18:06][352938776599198][1900 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:18:06][352938776599198][1900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938776599198\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9806\"}'\'' -e'"" [2025-09-06 14:18:06][352938776599198][1900 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:18:06][352938776599198][1900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938776599198\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9806\"}'\'' -e'"" [2025-09-06 14:18:09][352938776599198][5367 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_87b80e54-ddf4-4c09-bd01-ca82f66f3f7f","id":"QR_87b80e54-ddf4-4c09-bd01-ca82f66f3f7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:18:09][352938776599198][5523 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=3343 [2025-09-06 14:18:09][352938776599198][5523 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-06 14:18:09][352938776599198][5524 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:18:12][352938776599198][0 ms][INFO] === Request start === [2025-09-06 14:18:12][352938776599198][1 ms][DEBUG] START check_scloud [2025-09-06 14:18:12][352938776599198][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:18:12][352938776599198][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 4171 22065 24476572 184872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:18:12][352938776599198][308 ms][DEBUG] targetPkg: running [2025-09-06 14:18:12][352938776599198][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 14:18:12][352938776599198][308 ms][DEBUG] START check_boot_completed [2025-09-06 14:18:12][352938776599198][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:18:12][352938776599198][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:18:12][352938776599198][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:18:12][352938776599198][403 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 14:18:12][352938776599198][403 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 14:18:12][352938776599198][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:18:12][352938776599198][542 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1230\nsuccessfulTxPacketsPerSecond: 0.6358337244875879\nretriedTxPackets: 245\nretriedTxPacketsPerSecond: 0.17310656373484068\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1241\nsuccessfulRxPacketsPerSecond: 0.5526094149996837\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:18:12][352938776599198][543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:18:13][352938776599198][917 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.434/257.434/257.434/0.000 ms\n [2025-09-06 14:18:13][352938776599198][917 ms][DEBUG] check_internet: online [2025-09-06 14:18:13][352938776599198][917 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:18:13][352938776599198][917 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938776599198\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1398\"}'\'' -e'"" [2025-09-06 14:18:13][352938776599198][917 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:18:13][352938776599198][917 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938776599198\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1398\"}'\'' -e'"" [2025-09-06 14:18:18][352938776599198][5963 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3eb5f11e-9ccc-45c2-8262-62e88b2f453b","id":"QR_3eb5f11e-9ccc-45c2-8262-62e88b2f453b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:18:18][352938776599198][6119 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-06 14:18:18][352938776599198][6119 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-06 14:18:18][352938776599198][6119 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:20:03][357950544390540][0 ms][INFO] === Request start === [2025-09-06 14:20:03][357950544390540][1 ms][DEBUG] START check_scloud [2025-09-06 14:20:03][357950544390540][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:20:04][357950544390540][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 4171 22065 24588380 194132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:20:04][357950544390540][322 ms][DEBUG] targetPkg: running [2025-09-06 14:20:04][357950544390540][322 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 14:20:04][357950544390540][322 ms][DEBUG] START check_boot_completed [2025-09-06 14:20:04][357950544390540][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:20:04][357950544390540][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:20:04][357950544390540][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:20:04][357950544390540][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:20:04][357950544390540][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:20:04][357950544390540][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:20:04][357950544390540][525 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1230\nsuccessfulTxPacketsPerSecond: 0.6358337244875879\nretriedTxPackets: 245\nretriedTxPacketsPerSecond: 0.17310656373484068\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1241\nsuccessfulRxPacketsPerSecond: 0.5526094149996837\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:20:04][357950544390540][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:20:04][357950544390540][994 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=345 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 345.192/345.192/345.192/0.000 ms\n [2025-09-06 14:20:04][357950544390540][994 ms][DEBUG] check_internet: online [2025-09-06 14:20:04][357950544390540][994 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:20:04][357950544390540][994 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950544390540\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3277\"}'\'' -e'"" [2025-09-06 14:20:04][357950544390540][994 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:20:04][357950544390540][994 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950544390540\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3277\"}'\'' -e'"" [2025-09-06 14:20:10][357950544390540][6383 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a352cce1-1fb9-4b46-aa82-0d59ed4e6442","id":"QR_a352cce1-1fb9-4b46-aa82-0d59ed4e6442","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:20:10][357950544390540][6539 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-09-06 14:20:10][357950544390540][6539 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-09-06 14:20:10][357950544390540][6539 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:20:12][357950544390540][0 ms][INFO] === Request start === [2025-09-06 14:20:12][357950544390540][1 ms][DEBUG] START check_scloud [2025-09-06 14:20:12][357950544390540][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:20:13][357950544390540][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 4171 22065 24742244 205988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:20:13][357950544390540][314 ms][DEBUG] targetPkg: running [2025-09-06 14:20:13][357950544390540][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 14:20:13][357950544390540][315 ms][DEBUG] START check_boot_completed [2025-09-06 14:20:13][357950544390540][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:20:13][357950544390540][361 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:20:13][357950544390540][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:20:13][357950544390540][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:20:13][357950544390540][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:20:13][357950544390540][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:20:13][357950544390540][564 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1230\nsuccessfulTxPacketsPerSecond: 0.6358337244875879\nretriedTxPackets: 245\nretriedTxPacketsPerSecond: 0.17310656373484068\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1241\nsuccessfulRxPacketsPerSecond: 0.5526094149996837\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:20:13][357950544390540][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:20:13][357950544390540][970 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=271 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 271.144/271.144/271.144/0.000 ms\n [2025-09-06 14:20:13][357950544390540][971 ms][DEBUG] check_internet: online [2025-09-06 14:20:13][357950544390540][971 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:20:13][357950544390540][971 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950544390540\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8293\"}'\'' -e'"" [2025-09-06 14:20:13][357950544390540][971 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:20:13][357950544390540][971 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950544390540\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8293\"}'\'' -e'"" [2025-09-06 14:20:18][357950544390540][5922 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4ea299e-d78d-4bad-a394-d7f3f6e97175","id":"QR_d4ea299e-d78d-4bad-a394-d7f3f6e97175","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:20:18][357950544390540][6079 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 14:20:18][357950544390540][6079 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 14:20:18][357950544390540][6079 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:20:23][353325478210853][0 ms][INFO] === Request start === [2025-09-06 14:20:23][353325478210853][1 ms][DEBUG] START check_scloud [2025-09-06 14:20:23][353325478210853][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:20:23][353325478210853][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 4171 22065 24905196 216536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:20:23][353325478210853][304 ms][DEBUG] targetPkg: running [2025-09-06 14:20:23][353325478210853][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 14:20:23][353325478210853][304 ms][DEBUG] START check_boot_completed [2025-09-06 14:20:23][353325478210853][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:20:23][353325478210853][349 ms][DEBUG] ADB: done in 44 ms; out [2025-09-06 14:20:23][353325478210853][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:20:23][353325478210853][397 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 14:20:23][353325478210853][397 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 14:20:23][353325478210853][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:20:23][353325478210853][521 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1409\nsuccessfulTxPacketsPerSecond: 0.5929999503072667\nretriedTxPackets: 292\nretriedTxPacketsPerSecond: 0.1557038975667125\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1397\nsuccessfulRxPacketsPerSecond: 0.5168044259661095\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:20:23][353325478210853][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:20:23][353325478210853][929 ms][DEBUG] SU: done in 408 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.614/301.614/301.614/0.000 ms\n [2025-09-06 14:20:23][353325478210853][929 ms][DEBUG] check_internet: online [2025-09-06 14:20:23][353325478210853][929 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:20:23][353325478210853][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325478210853\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6889\"}'\'' -e'"" [2025-09-06 14:20:23][353325478210853][929 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:20:23][353325478210853][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325478210853\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6889\"}'\'' -e'"" [2025-09-06 14:20:27][353325478210853][4520 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20a1e6fe-eab7-422e-9106-da3dd1ab064c","id":"QR_20a1e6fe-eab7-422e-9106-da3dd1ab064c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:20:27][353325478210853][4676 ms][DEBUG] proc_open done in 3747 ms; code=255; res.len=3343 [2025-09-06 14:20:27][353325478210853][4676 ms][DEBUG] END runCmdUntilRes#1 in 3747 ms [2025-09-06 14:20:27][353325478210853][4676 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:20:30][353325478210853][0 ms][INFO] === Request start === [2025-09-06 14:20:30][353325478210853][1 ms][DEBUG] START check_scloud [2025-09-06 14:20:30][353325478210853][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:20:30][353325478210853][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 4171 22065 25041488 228380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:20:30][353325478210853][256 ms][DEBUG] targetPkg: running [2025-09-06 14:20:30][353325478210853][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-06 14:20:30][353325478210853][256 ms][DEBUG] START check_boot_completed [2025-09-06 14:20:30][353325478210853][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:20:30][353325478210853][303 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:20:30][353325478210853][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:20:30][353325478210853][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:20:30][353325478210853][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:20:30][353325478210853][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:20:30][353325478210853][459 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1409\nsuccessfulTxPacketsPerSecond: 0.5929999503072667\nretriedTxPackets: 292\nretriedTxPacketsPerSecond: 0.1557038975667125\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1397\nsuccessfulRxPacketsPerSecond: 0.5168044259661095\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:20:30][353325478210853][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:20:30][353325478210853][850 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.813/255.813/255.813/0.000 ms\n [2025-09-06 14:20:30][353325478210853][850 ms][DEBUG] check_internet: online [2025-09-06 14:20:30][353325478210853][850 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:20:30][353325478210853][850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325478210853\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6974\"}'\'' -e'"" [2025-09-06 14:20:30][353325478210853][850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:20:30][353325478210853][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325478210853\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6974\"}'\'' -e'"" [2025-09-06 14:20:35][353325478210853][5583 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9a8c0f6-2904-4be0-bac2-ca33c98ddbb7","id":"QR_f9a8c0f6-2904-4be0-bac2-ca33c98ddbb7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:20:35][353325478210853][5739 ms][DEBUG] proc_open done in 4888 ms; code=255; res.len=3343 [2025-09-06 14:20:35][353325478210853][5739 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 14:20:35][353325478210853][5739 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:22:03][355912111266794][0 ms][INFO] === Request start === [2025-09-06 14:22:03][355912111266794][1 ms][DEBUG] START check_scloud [2025-09-06 14:22:03][355912111266794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:22:03][355912111266794][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 4171 22065 25136752 239560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:22:03][355912111266794][320 ms][DEBUG] targetPkg: running [2025-09-06 14:22:03][355912111266794][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 14:22:03][355912111266794][320 ms][DEBUG] START check_boot_completed [2025-09-06 14:22:03][355912111266794][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:22:03][355912111266794][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:22:03][355912111266794][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:22:03][355912111266794][414 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 14:22:03][355912111266794][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:22:03][355912111266794][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:22:04][355912111266794][554 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1409\nsuccessfulTxPacketsPerSecond: 0.5929999503072667\nretriedTxPackets: 292\nretriedTxPacketsPerSecond: 0.1557038975667125\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1397\nsuccessfulRxPacketsPerSecond: 0.5168044259661095\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:22:04][355912111266794][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:22:04][355912111266794][960 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=282 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 282.052/282.052/282.052/0.000 ms\n [2025-09-06 14:22:04][355912111266794][960 ms][DEBUG] check_internet: online [2025-09-06 14:22:04][355912111266794][960 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:22:04][355912111266794][960 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355912111266794\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EVR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1504\"}'\'' -e'"" [2025-09-06 14:22:04][355912111266794][960 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:22:04][355912111266794][960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355912111266794\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EVR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1504\"}'\'' -e'"" [2025-09-06 14:22:08][355912111266794][4850 ms][DEBUG] proc_open done in 3889 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 14:22:08][355912111266794][4850 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-06 14:22:08][355912111266794][4850 ms][WARN] Detected error: Process with pid 4171 either refused to load frida-agent, or terminated during injectionProcess with pid 4171 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 14:22:08][355912111266794][4850 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 14:22:08][355912111266794][5132 ms][DEBUG] SU: done in 283 ms; outsystem 22396 22065 12628948 256952 ep_poll 0 S system_server\n [2025-09-06 14:22:08][355912111266794][5132 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 14:22:08][355912111266794][5272 ms][DEBUG] SU: done in 139 ms; out [2025-09-06 14:22:08][355912111266794][5272 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 14:22:08][355912111266794][5272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 14:22:08][355912111266794][5428 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 14:22:08][355912111266794][5428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 14:22:09][355912111266794][5662 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 14:22:11][355912111266794][7677 ms][DEBUG] START check_boot_completed [2025-09-06 14:22:11][355912111266794][7677 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:22:11][355912111266794][7724 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:22:11][355912111266794][7724 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:22:11][355912111266794][7787 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:22:11][355912111266794][7787 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 14:22:14][355912111266794][10801 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 14:22:14][355912111266794][10801 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355912111266794\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EVR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1504\"}'\'' -e'"" [2025-09-06 14:22:18][355912111266794][15394 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82c25680-d8e4-489d-9107-22df42fb9d3c","id":"QR_82c25680-d8e4-489d-9107-22df42fb9d3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:22:19][355912111266794][15550 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-06 14:22:19][355912111266794][15550 ms][DEBUG] END runCmdUntilRes#2 in 4749 ms [2025-09-06 14:22:19][355912111266794][15550 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:22:21][355912111266794][1 ms][INFO] === Request start === [2025-09-06 14:22:21][355912111266794][1 ms][DEBUG] START check_scloud [2025-09-06 14:22:21][355912111266794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:22:21][355912111266794][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 6053 22065 23855332 123616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:22:21][355912111266794][265 ms][DEBUG] targetPkg: running [2025-09-06 14:22:21][355912111266794][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-06 14:22:21][355912111266794][265 ms][DEBUG] START check_boot_completed [2025-09-06 14:22:21][355912111266794][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:22:21][355912111266794][312 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:22:21][355912111266794][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:22:21][355912111266794][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:22:21][355912111266794][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:22:21][355912111266794][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:22:21][355912111266794][484 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1409\nsuccessfulTxPacketsPerSecond: 0.5929999503072667\nretriedTxPackets: 292\nretriedTxPacketsPerSecond: 0.1557038975667125\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1397\nsuccessfulRxPacketsPerSecond: 0.5168044259661095\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:22:21][355912111266794][484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:22:22][355912111266794][905 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.437/259.437/259.437/0.000 ms\n [2025-09-06 14:22:22][355912111266794][906 ms][DEBUG] check_internet: online [2025-09-06 14:22:22][355912111266794][906 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:22:22][355912111266794][906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355912111266794\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EVR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9608\"}'\'' -e'"" [2025-09-06 14:22:22][355912111266794][906 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:22:22][355912111266794][906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355912111266794\",\"model\":\"SM-A202F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EVR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9608\"}'\'' -e'"" [2025-09-06 14:22:27][355912111266794][5951 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f62bec3d-780a-4ae0-8a00-f5fd146473ee","id":"QR_f62bec3d-780a-4ae0-8a00-f5fd146473ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:22:27][355912111266794][6107 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-06 14:22:27][355912111266794][6107 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-06 14:22:27][355912111266794][6107 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:23:06][350765950422638][0 ms][INFO] === Request start === [2025-09-06 14:23:06][350765950422638][1 ms][DEBUG] START check_scloud [2025-09-06 14:23:06][350765950422638][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:23:06][350765950422638][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 6053 22065 23935644 138424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:23:06][350765950422638][269 ms][DEBUG] targetPkg: running [2025-09-06 14:23:06][350765950422638][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-06 14:23:06][350765950422638][269 ms][DEBUG] START check_boot_completed [2025-09-06 14:23:06][350765950422638][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:23:06][350765950422638][315 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:23:06][350765950422638][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:23:06][350765950422638][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:23:06][350765950422638][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:23:06][350765950422638][362 ms][DEBUG] rawBody.length=1170 [2025-09-06 14:23:06][350765950422638][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350765950422638\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52T704NTKH\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9241\"}'\'' -e'"" [2025-09-06 14:23:06][350765950422638][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:23:06][350765950422638][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350765950422638\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52T704NTKH\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9241\"}'\'' -e'"" [2025-09-06 14:23:11][350765950422638][5127 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a5a7ef3-1c4c-4c5b-a158-6e45f5397a40","id":"QR_2a5a7ef3-1c4c-4c5b-a158-6e45f5397a40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:23:11][350765950422638][5283 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-09-06 14:23:11][350765950422638][5283 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-09-06 14:23:11][350765950422638][5283 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:24:03][355322299278159][0 ms][INFO] === Request start === [2025-09-06 14:24:03][355322299278159][1 ms][DEBUG] START check_scloud [2025-09-06 14:24:03][355322299278159][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:24:03][355322299278159][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 6053 22065 24071872 149240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:24:03][355322299278159][317 ms][DEBUG] targetPkg: running [2025-09-06 14:24:03][355322299278159][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 14:24:03][355322299278159][317 ms][DEBUG] START check_boot_completed [2025-09-06 14:24:03][355322299278159][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:24:03][355322299278159][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:24:03][355322299278159][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:24:03][355322299278159][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:24:03][355322299278159][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:24:03][355322299278159][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:24:04][355322299278159][520 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1529\nsuccessfulTxPacketsPerSecond: 0.935132944733643\nretriedTxPackets: 326\nretriedTxPacketsPerSecond: 0.26495433434119886\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1497\nsuccessfulRxPacketsPerSecond: 0.7792774539447025\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:24:04][355322299278159][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:24:05][355322299278159][2004 ms][DEBUG] SU: done in 1484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.899/300.899/300.899/0.000 ms\n [2025-09-06 14:24:05][355322299278159][2004 ms][DEBUG] check_internet: online [2025-09-06 14:24:05][355322299278159][2004 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:24:05][355322299278159][2004 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322299278159\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9409\"}'\'' -e'"" [2025-09-06 14:24:05][355322299278159][2004 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:24:05][355322299278159][2004 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322299278159\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9409\"}'\'' -e'"" [2025-09-06 14:24:10][355322299278159][6456 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11122e93-0501-4924-9754-6916ef0f0ac8","id":"QR_11122e93-0501-4924-9754-6916ef0f0ac8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:24:10][355322299278159][6612 ms][DEBUG] proc_open done in 4607 ms; code=255; res.len=3343 [2025-09-06 14:24:10][355322299278159][6612 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-09-06 14:24:10][355322299278159][6612 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:24:12][355322299278159][0 ms][INFO] === Request start === [2025-09-06 14:24:12][355322299278159][1 ms][DEBUG] START check_scloud [2025-09-06 14:24:12][355322299278159][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:24:12][355322299278159][284 ms][DEBUG] SU: done in 284 ms; outu0_a118 6053 22065 24205180 159940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:24:12][355322299278159][284 ms][DEBUG] targetPkg: running [2025-09-06 14:24:12][355322299278159][284 ms][DEBUG] END check_scloud in 284 ms [2025-09-06 14:24:12][355322299278159][285 ms][DEBUG] START check_boot_completed [2025-09-06 14:24:12][355322299278159][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:24:12][355322299278159][329 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 14:24:12][355322299278159][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:24:13][355322299278159][392 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 14:24:13][355322299278159][392 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-06 14:24:13][355322299278159][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:24:13][355322299278159][517 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1529\nsuccessfulTxPacketsPerSecond: 0.935132944733643\nretriedTxPackets: 326\nretriedTxPacketsPerSecond: 0.26495433434119886\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1497\nsuccessfulRxPacketsPerSecond: 0.7792774539447025\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:24:13][355322299278159][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:24:13][355322299278159][876 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.953/226.953/226.953/0.000 ms\n [2025-09-06 14:24:13][355322299278159][876 ms][DEBUG] check_internet: online [2025-09-06 14:24:13][355322299278159][876 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:24:13][355322299278159][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322299278159\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7932\"}'\'' -e'"" [2025-09-06 14:24:13][355322299278159][877 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:24:13][355322299278159][877 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322299278159\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7932\"}'\'' -e'"" [2025-09-06 14:24:18][355322299278159][5765 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7431d52-6083-46dd-85f7-73ea732f5908","id":"QR_a7431d52-6083-46dd-85f7-73ea732f5908","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:24:18][355322299278159][5922 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-09-06 14:24:18][355322299278159][5922 ms][DEBUG] END runCmdUntilRes#1 in 5045 ms [2025-09-06 14:24:18][355322299278159][5922 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:24:24][357651712444099][1 ms][INFO] === Request start === [2025-09-06 14:24:24][357651712444099][1 ms][DEBUG] START check_scloud [2025-09-06 14:24:24][357651712444099][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:24:24][357651712444099][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 6053 22065 24380548 170912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:24:24][357651712444099][321 ms][DEBUG] targetPkg: running [2025-09-06 14:24:24][357651712444099][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 14:24:24][357651712444099][321 ms][DEBUG] START check_boot_completed [2025-09-06 14:24:24][357651712444099][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:24:24][357651712444099][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:24:24][357651712444099][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:24:24][357651712444099][430 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:24:24][357651712444099][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:24:24][357651712444099][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:24:24][357651712444099][555 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1529\nsuccessfulTxPacketsPerSecond: 0.935132944733643\nretriedTxPackets: 326\nretriedTxPacketsPerSecond: 0.26495433434119886\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1497\nsuccessfulRxPacketsPerSecond: 0.7792774539447025\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:24:24][357651712444099][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:24:25][357651712444099][1008 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=320 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 320.197/320.197/320.197/0.000 ms\n [2025-09-06 14:24:25][357651712444099][1009 ms][DEBUG] check_internet: online [2025-09-06 14:24:25][357651712444099][1009 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:24:25][357651712444099][1009 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651712444099\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5341\"}'\'' -e'"" [2025-09-06 14:24:25][357651712444099][1009 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:24:25][357651712444099][1009 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651712444099\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5341\"}'\'' -e'"" [2025-09-06 14:24:29][357651712444099][5757 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b9e50ed-6f3a-4643-aae5-2f0a054a4261","id":"QR_4b9e50ed-6f3a-4643-aae5-2f0a054a4261","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:24:29][357651712444099][5913 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 14:24:29][357651712444099][5913 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-09-06 14:24:29][357651712444099][5913 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:24:33][357651712444099][0 ms][INFO] === Request start === [2025-09-06 14:24:33][357651712444099][1 ms][DEBUG] START check_scloud [2025-09-06 14:24:33][357651712444099][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:24:33][357651712444099][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 6053 22065 24500456 182764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:24:33][357651712444099][301 ms][DEBUG] targetPkg: running [2025-09-06 14:24:33][357651712444099][301 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 14:24:33][357651712444099][301 ms][DEBUG] START check_boot_completed [2025-09-06 14:24:33][357651712444099][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:24:33][357651712444099][348 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:24:33][357651712444099][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:24:33][357651712444099][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:24:33][357651712444099][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:24:33][357651712444099][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:24:33][357651712444099][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1529\nsuccessfulTxPacketsPerSecond: 0.935132944733643\nretriedTxPackets: 326\nretriedTxPacketsPerSecond: 0.26495433434119886\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1497\nsuccessfulRxPacketsPerSecond: 0.7792774539447025\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:24:33][357651712444099][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:24:34][357651712444099][1020 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=383 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 383.652/383.652/383.652/0.000 ms\n [2025-09-06 14:24:34][357651712444099][1020 ms][DEBUG] check_internet: online [2025-09-06 14:24:34][357651712444099][1020 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:24:34][357651712444099][1020 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651712444099\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7262\"}'\'' -e'"" [2025-09-06 14:24:34][357651712444099][1020 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:24:34][357651712444099][1020 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651712444099\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7262\"}'\'' -e'"" [2025-09-06 14:24:38][357651712444099][4628 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9cf2c0d1-9c48-40c0-bb06-1ef4193fa915","id":"QR_9cf2c0d1-9c48-40c0-bb06-1ef4193fa915","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:24:38][357651712444099][4784 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-06 14:24:38][357651712444099][4784 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-09-06 14:24:38][357651712444099][4784 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:30:03][355859830262341][1 ms][INFO] === Request start === [2025-09-06 14:30:03][355859830262341][1 ms][DEBUG] START check_scloud [2025-09-06 14:30:03][355859830262341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:30:03][355859830262341][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 6053 22065 24571268 194240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:30:03][355859830262341][305 ms][DEBUG] targetPkg: running [2025-09-06 14:30:03][355859830262341][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 14:30:03][355859830262341][305 ms][DEBUG] START check_boot_completed [2025-09-06 14:30:03][355859830262341][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:30:03][355859830262341][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:30:03][355859830262341][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:30:03][355859830262341][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:30:03][355859830262341][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:30:03][355859830262341][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:30:03][355859830262341][493 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1715\nsuccessfulTxPacketsPerSecond: 0.6136446865298393\nretriedTxPackets: 372\nretriedTxPacketsPerSecond: 0.15176158914178822\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1663\nsuccessfulRxPacketsPerSecond: 0.5476613869029748\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:30:03][355859830262341][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:30:04][355859830262341][1196 ms][DEBUG] SU: done in 702 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.636/303.636/303.636/0.000 ms\n [2025-09-06 14:30:04][355859830262341][1196 ms][DEBUG] check_internet: online [2025-09-06 14:30:04][355859830262341][1196 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:30:04][355859830262341][1196 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859830262341\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7808\"}'\'' -e'"" [2025-09-06 14:30:04][355859830262341][1196 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:30:04][355859830262341][1196 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859830262341\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7808\"}'\'' -e'"" [2025-09-06 14:30:08][355859830262341][4929 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d33486a-ddff-49be-94da-cd2d56f5afc1","id":"QR_7d33486a-ddff-49be-94da-cd2d56f5afc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:30:08][355859830262341][5085 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-09-06 14:30:08][355859830262341][5085 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-06 14:30:08][355859830262341][5085 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:31:03][358875770122920][0 ms][INFO] === Request start === [2025-09-06 14:31:03][358875770122920][1 ms][DEBUG] START check_scloud [2025-09-06 14:31:03][358875770122920][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:31:03][358875770122920][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 6053 22065 24702624 204428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:31:03][358875770122920][320 ms][DEBUG] targetPkg: running [2025-09-06 14:31:03][358875770122920][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 14:31:03][358875770122920][320 ms][DEBUG] START check_boot_completed [2025-09-06 14:31:03][358875770122920][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:31:04][358875770122920][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:31:04][358875770122920][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:31:04][358875770122920][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:31:04][358875770122920][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:31:04][358875770122920][398 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:31:04][358875770122920][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358875770122920\",\"model\":\"SM-E166P\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1075\"}'\'' -e'"" [2025-09-06 14:31:04][358875770122920][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:31:04][358875770122920][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358875770122920\",\"model\":\"SM-E166P\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1075\"}'\'' -e'"" [2025-09-06 14:31:07][358875770122920][3850 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93ffd44a-5fb2-489c-901c-5bb05441dbe0","id":"QR_93ffd44a-5fb2-489c-901c-5bb05441dbe0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:31:07][358875770122920][4006 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-06 14:31:07][358875770122920][4006 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-06 14:31:07][358875770122920][4007 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:31:10][358875770122920][0 ms][INFO] === Request start === [2025-09-06 14:31:10][358875770122920][1 ms][DEBUG] START check_scloud [2025-09-06 14:31:10][358875770122920][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:31:10][358875770122920][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 6053 22065 24829984 215212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:31:10][358875770122920][266 ms][DEBUG] targetPkg: running [2025-09-06 14:31:10][358875770122920][266 ms][DEBUG] END check_scloud in 266 ms [2025-09-06 14:31:10][358875770122920][266 ms][DEBUG] START check_boot_completed [2025-09-06 14:31:10][358875770122920][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:31:10][358875770122920][313 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:31:10][358875770122920][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:31:10][358875770122920][375 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:31:10][358875770122920][375 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:31:10][358875770122920][376 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:31:10][358875770122920][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358875770122920\",\"model\":\"SM-E166P\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7894\"}'\'' -e'"" [2025-09-06 14:31:10][358875770122920][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:31:10][358875770122920][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358875770122920\",\"model\":\"SM-E166P\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7894\"}'\'' -e'"" [2025-09-06 14:31:16][358875770122920][6733 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c46f130-d693-42be-8c23-7c0bcf34b05d","id":"QR_6c46f130-d693-42be-8c23-7c0bcf34b05d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:31:16][358875770122920][6889 ms][DEBUG] proc_open done in 6513 ms; code=255; res.len=3343 [2025-09-06 14:31:16][358875770122920][6889 ms][DEBUG] END runCmdUntilRes#1 in 6514 ms [2025-09-06 14:31:16][358875770122920][6889 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:32:03][357688950582834][1 ms][INFO] === Request start === [2025-09-06 14:32:03][357688950582834][1 ms][DEBUG] START check_scloud [2025-09-06 14:32:03][357688950582834][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:32:03][357688950582834][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 6053 22065 24945696 227132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:32:03][357688950582834][308 ms][DEBUG] targetPkg: running [2025-09-06 14:32:03][357688950582834][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 14:32:03][357688950582834][308 ms][DEBUG] START check_boot_completed [2025-09-06 14:32:03][357688950582834][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:32:03][357688950582834][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:32:03][357688950582834][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:32:03][357688950582834][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:32:03][357688950582834][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:32:03][357688950582834][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:32:03][357688950582834][480 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1715\nsuccessfulTxPacketsPerSecond: 0.6136446865298393\nretriedTxPackets: 372\nretriedTxPacketsPerSecond: 0.15176158914178822\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1663\nsuccessfulRxPacketsPerSecond: 0.5476613869029748\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:32:03][357688950582834][480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:32:04][357688950582834][902 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=334 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 334.010/334.010/334.010/0.000 ms\n [2025-09-06 14:32:04][357688950582834][902 ms][DEBUG] check_internet: online [2025-09-06 14:32:04][357688950582834][902 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:32:04][357688950582834][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357688950582834\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2461\"}'\'' -e'"" [2025-09-06 14:32:04][357688950582834][902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:32:04][357688950582834][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357688950582834\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2461\"}'\'' -e'"" [2025-09-06 14:32:08][357688950582834][5541 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2341882-147f-4898-9e6c-cfefe22aa2df","id":"QR_c2341882-147f-4898-9e6c-cfefe22aa2df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:32:09][357688950582834][5697 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 14:32:09][357688950582834][5697 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-09-06 14:32:09][357688950582834][5698 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:32:11][357688950582834][1 ms][INFO] === Request start === [2025-09-06 14:32:11][357688950582834][1 ms][DEBUG] START check_scloud [2025-09-06 14:32:11][357688950582834][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:32:11][357688950582834][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 6053 22065 25096488 233308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:32:11][357688950582834][248 ms][DEBUG] targetPkg: running [2025-09-06 14:32:11][357688950582834][248 ms][DEBUG] END check_scloud in 247 ms [2025-09-06 14:32:11][357688950582834][249 ms][DEBUG] START check_boot_completed [2025-09-06 14:32:11][357688950582834][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:32:11][357688950582834][295 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:32:11][357688950582834][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:32:11][357688950582834][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:32:11][357688950582834][342 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:32:11][357688950582834][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:32:11][357688950582834][467 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1715\nsuccessfulTxPacketsPerSecond: 0.6136446865298393\nretriedTxPackets: 372\nretriedTxPacketsPerSecond: 0.15176158914178822\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1663\nsuccessfulRxPacketsPerSecond: 0.5476613869029748\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:32:11][357688950582834][467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:32:12][357688950582834][826 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=265 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 265.392/265.392/265.392/0.000 ms\n [2025-09-06 14:32:12][357688950582834][826 ms][DEBUG] check_internet: online [2025-09-06 14:32:12][357688950582834][826 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:32:12][357688950582834][826 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357688950582834\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4818\"}'\'' -e'"" [2025-09-06 14:32:12][357688950582834][826 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:32:12][357688950582834][826 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357688950582834\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4818\"}'\'' -e'"" [2025-09-06 14:32:16][357688950582834][4575 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 14:32:16][357688950582834][4575 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-06 14:32:16][357688950582834][4575 ms][WARN] Detected error: Process with pid 6053 either refused to load frida-agent, or terminated during injectionProcess with pid 6053 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 14:32:16][357688950582834][4575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 14:32:16][357688950582834][4857 ms][DEBUG] SU: done in 281 ms; outsystem 22396 22065 12620516 214148 ep_poll 0 S system_server\n [2025-09-06 14:32:16][357688950582834][4857 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 14:32:16][357688950582834][4997 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 14:32:16][357688950582834][4997 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 14:32:16][357688950582834][4997 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 14:32:16][357688950582834][5138 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 14:32:16][357688950582834][5138 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 14:32:16][357688950582834][5325 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 14:32:18][357688950582834][7340 ms][DEBUG] START check_boot_completed [2025-09-06 14:32:18][357688950582834][7340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:32:18][357688950582834][7387 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:32:18][357688950582834][7387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:32:18][357688950582834][7435 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:32:18][357688950582834][7435 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 14:32:21][357688950582834][10449 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 14:32:21][357688950582834][10449 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357688950582834\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4818\"}'\'' -e'"" [2025-09-06 14:32:27][357688950582834][15604 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16c38a77-a44f-4cfa-a13f-49168879c303","id":"QR_16c38a77-a44f-4cfa-a13f-49168879c303","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:32:27][357688950582834][15760 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 14:32:27][357688950582834][15760 ms][DEBUG] END runCmdUntilRes#2 in 5311 ms [2025-09-06 14:32:27][357688950582834][15760 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:35:03][354355330569302][1 ms][INFO] === Request start === [2025-09-06 14:35:03][354355330569302][1 ms][DEBUG] START check_scloud [2025-09-06 14:35:03][354355330569302][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:35:03][354355330569302][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 8085 22065 23796264 128184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:35:03][354355330569302][253 ms][DEBUG] targetPkg: running [2025-09-06 14:35:03][354355330569302][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-06 14:35:03][354355330569302][253 ms][DEBUG] START check_boot_completed [2025-09-06 14:35:03][354355330569302][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:35:03][354355330569302][300 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:35:03][354355330569302][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:35:03][354355330569302][348 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 14:35:03][354355330569302][349 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 14:35:03][354355330569302][349 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:35:03][354355330569302][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354355330569302\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6525\"}'\'' -e'"" [2025-09-06 14:35:03][354355330569302][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:35:03][354355330569302][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354355330569302\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6525\"}'\'' -e'"" [2025-09-06 14:35:08][354355330569302][4830 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f023c815-0c71-435b-96f5-db060ca67a73","id":"QR_f023c815-0c71-435b-96f5-db060ca67a73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:35:08][354355330569302][4986 ms][DEBUG] proc_open done in 4637 ms; code=255; res.len=3343 [2025-09-06 14:35:08][354355330569302][4986 ms][DEBUG] END runCmdUntilRes#1 in 4638 ms [2025-09-06 14:35:08][354355330569302][4986 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:35:10][354355330569302][0 ms][INFO] === Request start === [2025-09-06 14:35:10][354355330569302][1 ms][DEBUG] START check_scloud [2025-09-06 14:35:10][354355330569302][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:35:10][354355330569302][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 8085 22065 23930416 138648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:35:10][354355330569302][290 ms][DEBUG] targetPkg: running [2025-09-06 14:35:10][354355330569302][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-06 14:35:10][354355330569302][290 ms][DEBUG] START check_boot_completed [2025-09-06 14:35:10][354355330569302][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:35:11][354355330569302][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:35:11][354355330569302][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:35:11][354355330569302][399 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 14:35:11][354355330569302][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:35:11][354355330569302][399 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:35:11][354355330569302][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354355330569302\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5578\"}'\'' -e'"" [2025-09-06 14:35:11][354355330569302][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:35:11][354355330569302][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354355330569302\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5578\"}'\'' -e'"" [2025-09-06 14:35:16][354355330569302][5866 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_228aaa61-446e-41b1-894c-42f80ac7a40e","id":"QR_228aaa61-446e-41b1-894c-42f80ac7a40e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:35:16][354355330569302][6022 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-09-06 14:35:16][354355330569302][6023 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-09-06 14:35:16][354355330569302][6023 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:36:03][356414816000593][0 ms][INFO] === Request start === [2025-09-06 14:36:03][356414816000593][1 ms][DEBUG] START check_scloud [2025-09-06 14:36:03][356414816000593][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:36:03][356414816000593][270 ms][DEBUG] SU: done in 270 ms; outu0_a118 8085 22065 24017520 150584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:36:03][356414816000593][271 ms][DEBUG] targetPkg: running [2025-09-06 14:36:03][356414816000593][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-06 14:36:03][356414816000593][271 ms][DEBUG] START check_boot_completed [2025-09-06 14:36:03][356414816000593][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:36:03][356414816000593][317 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:36:03][356414816000593][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:36:03][356414816000593][380 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:36:03][356414816000593][380 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:36:03][356414816000593][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:36:03][356414816000593][489 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1945\nsuccessfulTxPacketsPerSecond: 0.7640866009109241\nretriedTxPackets: 435\nretriedTxPacketsPerSecond: 0.2092932863364705\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1855\nsuccessfulRxPacketsPerSecond: 0.6378462059778149\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:36:03][356414816000593][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:36:05][356414816000593][1817 ms][DEBUG] SU: done in 1327 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.918/301.918/301.918/0.000 ms\n [2025-09-06 14:36:05][356414816000593][1817 ms][DEBUG] check_internet: online [2025-09-06 14:36:05][356414816000593][1817 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:36:05][356414816000593][1817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816000593\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3131\"}'\'' -e'"" [2025-09-06 14:36:05][356414816000593][1817 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:36:05][356414816000593][1817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816000593\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3131\"}'\'' -e'"" [2025-09-06 14:36:09][356414816000593][5925 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6fb10287-3072-4498-a532-ae76022d180d","id":"QR_6fb10287-3072-4498-a532-ae76022d180d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:36:09][356414816000593][6081 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-09-06 14:36:09][356414816000593][6081 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-09-06 14:36:09][356414816000593][6081 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:36:11][356414816000593][1 ms][INFO] === Request start === [2025-09-06 14:36:11][356414816000593][1 ms][DEBUG] START check_scloud [2025-09-06 14:36:11][356414816000593][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:36:12][356414816000593][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 8085 22065 24196408 161648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:36:12][356414816000593][317 ms][DEBUG] targetPkg: running [2025-09-06 14:36:12][356414816000593][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 14:36:12][356414816000593][317 ms][DEBUG] START check_boot_completed [2025-09-06 14:36:12][356414816000593][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:36:12][356414816000593][348 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:36:12][356414816000593][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:36:12][356414816000593][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:36:12][356414816000593][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:36:12][356414816000593][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:36:12][356414816000593][520 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1945\nsuccessfulTxPacketsPerSecond: 0.7640866009109241\nretriedTxPackets: 435\nretriedTxPacketsPerSecond: 0.2092932863364705\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1855\nsuccessfulRxPacketsPerSecond: 0.6378462059778149\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:36:12][356414816000593][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:36:12][356414816000593][973 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=345 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 345.205/345.205/345.205/0.000 ms\n [2025-09-06 14:36:12][356414816000593][973 ms][DEBUG] check_internet: online [2025-09-06 14:36:12][356414816000593][973 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:36:12][356414816000593][973 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816000593\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4789\"}'\'' -e'"" [2025-09-06 14:36:12][356414816000593][973 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:36:12][356414816000593][973 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816000593\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4789\"}'\'' -e'"" [2025-09-06 14:36:18][356414816000593][6534 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43a59dc9-f101-4ed3-893d-7722e31e182e","id":"QR_43a59dc9-f101-4ed3-893d-7722e31e182e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:36:18][356414816000593][6690 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-06 14:36:18][356414816000593][6690 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-06 14:36:18][356414816000593][6690 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:37:03][357294612018976][0 ms][INFO] === Request start === [2025-09-06 14:37:03][357294612018976][1 ms][DEBUG] START check_scloud [2025-09-06 14:37:03][357294612018976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:37:03][357294612018976][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 8085 22065 24318328 172188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:37:03][357294612018976][321 ms][DEBUG] targetPkg: running [2025-09-06 14:37:03][357294612018976][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 14:37:03][357294612018976][321 ms][DEBUG] START check_boot_completed [2025-09-06 14:37:03][357294612018976][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:37:03][357294612018976][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:37:03][357294612018976][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:37:03][357294612018976][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:37:03][357294612018976][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:37:03][357294612018976][414 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:37:03][357294612018976][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357294612018976\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4333\"}'\'' -e'"" [2025-09-06 14:37:03][357294612018976][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:37:03][357294612018976][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357294612018976\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4333\"}'\'' -e'"" [2025-09-06 14:37:06][357294612018976][3820 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8bdc7098-288f-4e14-b61c-d5328d205bdf","id":"QR_8bdc7098-288f-4e14-b61c-d5328d205bdf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:37:07][357294612018976][3976 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-06 14:37:07][357294612018976][3976 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-09-06 14:37:07][357294612018976][3976 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:37:09][357294612018976][1 ms][INFO] === Request start === [2025-09-06 14:37:09][357294612018976][1 ms][DEBUG] START check_scloud [2025-09-06 14:37:09][357294612018976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:37:09][357294612018976][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 8085 22065 24440384 183980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:37:09][357294612018976][311 ms][DEBUG] targetPkg: running [2025-09-06 14:37:09][357294612018976][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 14:37:09][357294612018976][311 ms][DEBUG] START check_boot_completed [2025-09-06 14:37:09][357294612018976][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:37:09][357294612018976][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:37:09][357294612018976][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:37:10][357294612018976][452 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 14:37:10][357294612018976][452 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-06 14:37:10][357294612018976][452 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:37:10][357294612018976][452 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357294612018976\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2069\"}'\'' -e'"" [2025-09-06 14:37:10][357294612018976][452 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:37:10][357294612018976][452 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357294612018976\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2069\"}'\'' -e'"" [2025-09-06 14:37:14][357294612018976][5200 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b7c885f-6a29-4739-9162-ec8df8ee96ae","id":"QR_5b7c885f-6a29-4739-9162-ec8df8ee96ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:37:14][357294612018976][5356 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 14:37:14][357294612018976][5356 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 14:37:14][357294612018976][5356 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:42:04][350938286449720][1 ms][INFO] === Request start === [2025-09-06 14:42:04][350938286449720][1 ms][DEBUG] START check_scloud [2025-09-06 14:42:04][350938286449720][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:42:04][350938286449720][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 8085 22065 24559260 155632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:42:04][350938286449720][319 ms][DEBUG] targetPkg: running [2025-09-06 14:42:04][350938286449720][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 14:42:04][350938286449720][319 ms][DEBUG] START check_boot_completed [2025-09-06 14:42:04][350938286449720][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:42:04][350938286449720][351 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:42:04][350938286449720][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:42:04][350938286449720][413 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 14:42:04][350938286449720][413 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:42:04][350938286449720][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:42:04][350938286449720][554 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2185\nsuccessfulTxPacketsPerSecond: 0.1813236627379873\nretriedTxPackets: 497\nretriedTxPacketsPerSecond: 0.050601952391996455\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2070\nsuccessfulRxPacketsPerSecond: 0.1560226865419891\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:42:04][350938286449720][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:42:06][350938286449720][1928 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.884/300.884/300.884/0.000 ms\n [2025-09-06 14:42:06][350938286449720][1929 ms][DEBUG] check_internet: online [2025-09-06 14:42:06][350938286449720][1929 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:42:06][350938286449720][1929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938286449720\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1159\"}'\'' -e'"" [2025-09-06 14:42:06][350938286449720][1929 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:42:06][350938286449720][1929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938286449720\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1159\"}'\'' -e'"" [2025-09-06 14:42:10][350938286449720][5990 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2977e3bf-3e56-4fcc-bb49-2858fd8ef835","id":"QR_2977e3bf-3e56-4fcc-bb49-2858fd8ef835","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:42:10][350938286449720][6146 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-09-06 14:42:10][350938286449720][6146 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-09-06 14:42:10][350938286449720][6146 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:42:12][350938286449720][0 ms][INFO] === Request start === [2025-09-06 14:42:12][350938286449720][1 ms][DEBUG] START check_scloud [2025-09-06 14:42:12][350938286449720][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:42:12][350938286449720][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 8085 22065 24731556 150180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:42:12][350938286449720][299 ms][DEBUG] targetPkg: running [2025-09-06 14:42:12][350938286449720][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 14:42:12][350938286449720][299 ms][DEBUG] START check_boot_completed [2025-09-06 14:42:12][350938286449720][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:42:12][350938286449720][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:42:12][350938286449720][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:42:12][350938286449720][377 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:42:12][350938286449720][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:42:12][350938286449720][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:42:13][350938286449720][487 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2185\nsuccessfulTxPacketsPerSecond: 0.1813236627379873\nretriedTxPackets: 497\nretriedTxPacketsPerSecond: 0.050601952391996455\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2070\nsuccessfulRxPacketsPerSecond: 0.1560226865419891\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:42:13][350938286449720][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:42:13][350938286449720][862 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.845/260.845/260.845/0.000 ms\n [2025-09-06 14:42:13][350938286449720][862 ms][DEBUG] check_internet: online [2025-09-06 14:42:13][350938286449720][862 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:42:13][350938286449720][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938286449720\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7285\"}'\'' -e'"" [2025-09-06 14:42:13][350938286449720][862 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:42:13][350938286449720][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938286449720\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7285\"}'\'' -e'"" [2025-09-06 14:42:18][350938286449720][5907 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d35e0e85-b7a2-4152-af42-ced49865e0e2","id":"QR_d35e0e85-b7a2-4152-af42-ced49865e0e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:42:18][350938286449720][6064 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-06 14:42:18][350938286449720][6064 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-06 14:42:18][350938286449720][6064 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:42:22][356214463480290][0 ms][INFO] === Request start === [2025-09-06 14:42:22][356214463480290][1 ms][DEBUG] START check_scloud [2025-09-06 14:42:22][356214463480290][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:42:23][356214463480290][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 8085 22065 24890540 153508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:42:23][356214463480290][308 ms][DEBUG] targetPkg: running [2025-09-06 14:42:23][356214463480290][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 14:42:23][356214463480290][309 ms][DEBUG] START check_boot_completed [2025-09-06 14:42:23][356214463480290][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:42:23][356214463480290][353 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 14:42:23][356214463480290][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:42:23][356214463480290][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:42:23][356214463480290][400 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 14:42:23][356214463480290][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:42:23][356214463480290][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2185\nsuccessfulTxPacketsPerSecond: 0.1813236627379873\nretriedTxPackets: 497\nretriedTxPacketsPerSecond: 0.050601952391996455\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2070\nsuccessfulRxPacketsPerSecond: 0.1560226865419891\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:42:23][356214463480290][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:42:23][356214463480290][947 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.393/303.393/303.393/0.000 ms\n [2025-09-06 14:42:23][356214463480290][947 ms][DEBUG] check_internet: online [2025-09-06 14:42:23][356214463480290][947 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:42:23][356214463480290][947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356214463480290\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4071\"}'\'' -e'"" [2025-09-06 14:42:23][356214463480290][947 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:42:23][356214463480290][947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356214463480290\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4071\"}'\'' -e'"" [2025-09-06 14:42:27][356214463480290][4446 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ddf65e52-be0d-4762-95e3-58767eb1333f","id":"QR_ddf65e52-be0d-4762-95e3-58767eb1333f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:42:27][356214463480290][4602 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-06 14:42:27][356214463480290][4603 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-06 14:42:27][356214463480290][4603 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:42:29][356214463480290][0 ms][INFO] === Request start === [2025-09-06 14:42:29][356214463480290][1 ms][DEBUG] START check_scloud [2025-09-06 14:42:29][356214463480290][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:42:30][356214463480290][253 ms][DEBUG] SU: done in 253 ms; outu0_a118 8085 22065 25026964 165380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:42:30][356214463480290][253 ms][DEBUG] targetPkg: running [2025-09-06 14:42:30][356214463480290][253 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 14:42:30][356214463480290][253 ms][DEBUG] START check_boot_completed [2025-09-06 14:42:30][356214463480290][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:42:30][356214463480290][284 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:42:30][356214463480290][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:42:30][356214463480290][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:42:30][356214463480290][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:42:30][356214463480290][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:42:30][356214463480290][456 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2185\nsuccessfulTxPacketsPerSecond: 0.1813236627379873\nretriedTxPackets: 497\nretriedTxPacketsPerSecond: 0.050601952391996455\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2070\nsuccessfulRxPacketsPerSecond: 0.1560226865419891\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:42:30][356214463480290][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:42:30][356214463480290][894 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=332 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 332.703/332.703/332.703/0.000 ms\n [2025-09-06 14:42:30][356214463480290][894 ms][DEBUG] check_internet: online [2025-09-06 14:42:30][356214463480290][894 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:42:30][356214463480290][894 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356214463480290\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5419\"}'\'' -e'"" [2025-09-06 14:42:30][356214463480290][895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:42:30][356214463480290][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356214463480290\",\"model\":\"SM-N980F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5419\"}'\'' -e'"" [2025-09-06 14:42:35][356214463480290][5783 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29a956a3-d754-4ce2-8c51-01a181eacf73","id":"QR_29a956a3-d754-4ce2-8c51-01a181eacf73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:42:35][356214463480290][5939 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-09-06 14:42:35][356214463480290][5939 ms][DEBUG] END runCmdUntilRes#1 in 5045 ms [2025-09-06 14:42:35][356214463480290][5939 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:43:03][354838359551087][0 ms][INFO] === Request start === [2025-09-06 14:43:03][354838359551087][1 ms][DEBUG] START check_scloud [2025-09-06 14:43:03][354838359551087][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:43:03][354838359551087][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 8085 22065 25130480 175640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:43:03][354838359551087][312 ms][DEBUG] targetPkg: running [2025-09-06 14:43:03][354838359551087][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 14:43:03][354838359551087][312 ms][DEBUG] START check_boot_completed [2025-09-06 14:43:03][354838359551087][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:43:03][354838359551087][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:43:03][354838359551087][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:43:03][354838359551087][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:43:03][354838359551087][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:43:03][354838359551087][405 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:43:03][354838359551087][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838359551087\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6862\"}'\'' -e'"" [2025-09-06 14:43:03][354838359551087][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:43:03][354838359551087][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838359551087\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6862\"}'\'' -e'"" [2025-09-06 14:43:07][354838359551087][4264 ms][DEBUG] proc_open done in 3859 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 14:43:07][354838359551087][4264 ms][DEBUG] END runCmdUntilRes#1 in 3859 ms [2025-09-06 14:43:07][354838359551087][4264 ms][WARN] Detected error: Process with pid 8085 either refused to load frida-agent, or terminated during injectionProcess with pid 8085 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 14:43:07][354838359551087][4264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 14:43:07][354838359551087][4514 ms][DEBUG] SU: done in 250 ms; outsystem 22396 22065 12620516 183436 ep_poll 0 S system_server\n [2025-09-06 14:43:07][354838359551087][4514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 14:43:07][354838359551087][4654 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 14:43:07][354838359551087][4655 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 14:43:07][354838359551087][4655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 14:43:07][354838359551087][4779 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 14:43:07][354838359551087][4779 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 14:43:08][354838359551087][4982 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 14:43:10][354838359551087][6997 ms][DEBUG] START check_boot_completed [2025-09-06 14:43:10][354838359551087][6998 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:43:10][354838359551087][7044 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:43:10][354838359551087][7045 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:43:10][354838359551087][7107 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:43:10][354838359551087][7107 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:43:13][354838359551087][10122 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 14:43:13][354838359551087][10122 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838359551087\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6862\"}'\'' -e'"" [2025-09-06 14:43:18][354838359551087][14855 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b5d42d6-344b-47f5-94b6-66d3e01c289c","id":"QR_6b5d42d6-344b-47f5-94b6-66d3e01c289c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:43:18][354838359551087][15011 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 14:43:18][354838359551087][15011 ms][DEBUG] END runCmdUntilRes#2 in 4890 ms [2025-09-06 14:43:18][354838359551087][15011 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:43:20][354838359551087][0 ms][INFO] === Request start === [2025-09-06 14:43:20][354838359551087][1 ms][DEBUG] START check_scloud [2025-09-06 14:43:20][354838359551087][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:43:20][354838359551087][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 10252 22065 23856992 124456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:43:20][354838359551087][296 ms][DEBUG] targetPkg: running [2025-09-06 14:43:20][354838359551087][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 14:43:20][354838359551087][296 ms][DEBUG] START check_boot_completed [2025-09-06 14:43:20][354838359551087][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:43:20][354838359551087][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:43:20][354838359551087][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:43:20][354838359551087][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:43:20][354838359551087][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:43:20][354838359551087][390 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:43:20][354838359551087][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838359551087\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7931\"}'\'' -e'"" [2025-09-06 14:43:20][354838359551087][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:43:20][354838359551087][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838359551087\",\"model\":\"SM-A225F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7931\"}'\'' -e'"" [2025-09-06 14:43:26][354838359551087][5623 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c21d8f2-be59-43ba-9030-21e1bed5cf10","id":"QR_7c21d8f2-be59-43ba-9030-21e1bed5cf10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:43:26][354838359551087][5779 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-06 14:43:26][354838359551087][5779 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-06 14:43:26][354838359551087][5779 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:43:31][357651712532760][0 ms][INFO] === Request start === [2025-09-06 14:43:31][357651712532760][1 ms][DEBUG] START check_scloud [2025-09-06 14:43:31][357651712532760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:43:32][357651712532760][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 10252 22065 24041588 137592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:43:32][357651712532760][246 ms][DEBUG] targetPkg: running [2025-09-06 14:43:32][357651712532760][246 ms][DEBUG] END check_scloud in 245 ms [2025-09-06 14:43:32][357651712532760][246 ms][DEBUG] START check_boot_completed [2025-09-06 14:43:32][357651712532760][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:43:32][357651712532760][292 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:43:32][357651712532760][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:43:32][357651712532760][386 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 14:43:32][357651712532760][386 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 14:43:32][357651712532760][386 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:43:32][357651712532760][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651712532760\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8891\"}'\'' -e'"" [2025-09-06 14:43:32][357651712532760][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:43:32][357651712532760][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651712532760\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8891\"}'\'' -e'"" [2025-09-06 14:43:36][357651712532760][5057 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ce364db-5ec1-4774-89da-21cc7f593089","id":"QR_5ce364db-5ec1-4774-89da-21cc7f593089","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:43:37][357651712532760][5213 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=3343 [2025-09-06 14:43:37][357651712532760][5213 ms][DEBUG] END runCmdUntilRes#1 in 4826 ms [2025-09-06 14:43:37][357651712532760][5213 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:43:40][357651712532760][0 ms][INFO] === Request start === [2025-09-06 14:43:40][357651712532760][1 ms][DEBUG] START check_scloud [2025-09-06 14:43:40][357651712532760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:43:40][357651712532760][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 10252 22065 24077416 149576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:43:40][357651712532760][319 ms][DEBUG] targetPkg: running [2025-09-06 14:43:40][357651712532760][319 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 14:43:40][357651712532760][319 ms][DEBUG] START check_boot_completed [2025-09-06 14:43:40][357651712532760][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:43:40][357651712532760][365 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:43:40][357651712532760][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:43:41][357651712532760][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:43:41][357651712532760][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:43:41][357651712532760][412 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:43:41][357651712532760][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651712532760\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9270\"}'\'' -e'"" [2025-09-06 14:43:41][357651712532760][412 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:43:41][357651712532760][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651712532760\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9270\"}'\'' -e'"" [2025-09-06 14:43:44][357651712532760][3724 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9486138-580d-46a2-b77f-52406c55d53f","id":"QR_c9486138-580d-46a2-b77f-52406c55d53f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:43:44][357651712532760][3880 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-06 14:43:44][357651712532760][3880 ms][DEBUG] END runCmdUntilRes#1 in 3468 ms [2025-09-06 14:43:44][357651712532760][3880 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:45:03][350330052527220][1 ms][INFO] === Request start === [2025-09-06 14:45:03][350330052527220][1 ms][DEBUG] START check_scloud [2025-09-06 14:45:03][350330052527220][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:45:03][350330052527220][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 10252 22065 24178948 160664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:45:03][350330052527220][276 ms][DEBUG] targetPkg: running [2025-09-06 14:45:03][350330052527220][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-06 14:45:03][350330052527220][276 ms][DEBUG] START check_boot_completed [2025-09-06 14:45:03][350330052527220][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:45:03][350330052527220][307 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:45:03][350330052527220][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:45:03][350330052527220][370 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:45:03][350330052527220][370 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:45:03][350330052527220][370 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:45:03][350330052527220][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330052527220\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4596\"}'\'' -e'"" [2025-09-06 14:45:03][350330052527220][370 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:45:03][350330052527220][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330052527220\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4596\"}'\'' -e'"" [2025-09-06 14:45:09][350330052527220][5743 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7dae5753-3d4c-46d2-a16d-2c20890e5406","id":"QR_7dae5753-3d4c-46d2-a16d-2c20890e5406","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:45:09][350330052527220][5900 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-06 14:45:09][350330052527220][5900 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-06 14:45:09][350330052527220][5900 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:45:11][350330052527220][0 ms][INFO] === Request start === [2025-09-06 14:45:11][350330052527220][1 ms][DEBUG] START check_scloud [2025-09-06 14:45:11][350330052527220][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:45:12][350330052527220][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 10252 22065 24298844 171872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:45:12][350330052527220][314 ms][DEBUG] targetPkg: running [2025-09-06 14:45:12][350330052527220][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 14:45:12][350330052527220][314 ms][DEBUG] START check_boot_completed [2025-09-06 14:45:12][350330052527220][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:45:12][350330052527220][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:45:12][350330052527220][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:45:12][350330052527220][423 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 14:45:12][350330052527220][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:45:12][350330052527220][423 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:45:12][350330052527220][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330052527220\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5019\"}'\'' -e'"" [2025-09-06 14:45:12][350330052527220][423 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:45:12][350330052527220][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330052527220\",\"model\":\"SM-S901B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5019\"}'\'' -e'"" [2025-09-06 14:45:17][350330052527220][5609 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13deaef0-a62c-4bff-a89d-33c4c492555c","id":"QR_13deaef0-a62c-4bff-a89d-33c4c492555c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:45:17][350330052527220][5765 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-06 14:45:17][350330052527220][5765 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-06 14:45:17][350330052527220][5765 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:47:04][351537275439319][1 ms][INFO] === Request start === [2025-09-06 14:47:04][351537275439319][1 ms][DEBUG] START check_scloud [2025-09-06 14:47:04][351537275439319][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:47:04][351537275439319][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 10252 22065 24404892 183760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:47:04][351537275439319][311 ms][DEBUG] targetPkg: running [2025-09-06 14:47:04][351537275439319][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 14:47:04][351537275439319][311 ms][DEBUG] START check_boot_completed [2025-09-06 14:47:04][351537275439319][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:47:04][351537275439319][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:47:04][351537275439319][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:47:04][351537275439319][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:47:04][351537275439319][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:47:04][351537275439319][405 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:47:04][351537275439319][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537275439319\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6361\"}'\'' -e'"" [2025-09-06 14:47:04][351537275439319][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:47:04][351537275439319][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537275439319\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6361\"}'\'' -e'"" [2025-09-06 14:47:10][351537275439319][5779 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9559eed-c69d-4692-8a32-c833975aebe6","id":"QR_a9559eed-c69d-4692-8a32-c833975aebe6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:47:10][351537275439319][5935 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-06 14:47:10][351537275439319][5935 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-06 14:47:10][351537275439319][5935 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:47:14][351537275439319][1 ms][INFO] === Request start === [2025-09-06 14:47:14][351537275439319][1 ms][DEBUG] START check_scloud [2025-09-06 14:47:14][351537275439319][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:47:14][351537275439319][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 10252 22065 24570020 194848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:47:14][351537275439319][321 ms][DEBUG] targetPkg: running [2025-09-06 14:47:14][351537275439319][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-06 14:47:14][351537275439319][321 ms][DEBUG] START check_boot_completed [2025-09-06 14:47:14][351537275439319][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:47:14][351537275439319][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:47:14][351537275439319][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:47:14][351537275439319][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:47:14][351537275439319][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:47:14][351537275439319][415 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:47:14][351537275439319][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537275439319\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7052\"}'\'' -e'"" [2025-09-06 14:47:14][351537275439319][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:47:14][351537275439319][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537275439319\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7052\"}'\'' -e'"" [2025-09-06 14:47:18][351537275439319][4289 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_660012f4-3eeb-4103-ba2d-09d0eac9573b","id":"QR_660012f4-3eeb-4103-ba2d-09d0eac9573b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:47:18][351537275439319][4445 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-06 14:47:18][351537275439319][4445 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-06 14:47:18][351537275439319][4445 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:49:03][358184574968608][0 ms][INFO] === Request start === [2025-09-06 14:49:03][358184574968608][1 ms][DEBUG] START check_scloud [2025-09-06 14:49:03][358184574968608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:49:04][358184574968608][253 ms][DEBUG] SU: done in 253 ms; outu0_a118 10252 22065 24669540 206916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:49:04][358184574968608][254 ms][DEBUG] targetPkg: running [2025-09-06 14:49:04][358184574968608][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 14:49:04][358184574968608][254 ms][DEBUG] START check_boot_completed [2025-09-06 14:49:04][358184574968608][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:49:04][358184574968608][299 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 14:49:04][358184574968608][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:49:04][358184574968608][362 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:49:04][358184574968608][362 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 14:49:04][358184574968608][362 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:49:04][358184574968608][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184574968608\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5060\"}'\'' -e'"" [2025-09-06 14:49:04][358184574968608][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:49:04][358184574968608][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184574968608\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5060\"}'\'' -e'"" [2025-09-06 14:49:08][358184574968608][5032 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de2a1abb-317e-424a-9052-74892f045017","id":"QR_de2a1abb-317e-424a-9052-74892f045017","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:49:09][358184574968608][5188 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-09-06 14:49:09][358184574968608][5188 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-06 14:49:09][358184574968608][5189 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:49:11][358184574968608][1 ms][INFO] === Request start === [2025-09-06 14:49:11][358184574968608][1 ms][DEBUG] START check_scloud [2025-09-06 14:49:11][358184574968608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:49:11][358184574968608][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 10252 22065 24812012 217448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:49:11][358184574968608][252 ms][DEBUG] targetPkg: running [2025-09-06 14:49:11][358184574968608][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-06 14:49:11][358184574968608][252 ms][DEBUG] START check_boot_completed [2025-09-06 14:49:11][358184574968608][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:49:11][358184574968608][298 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 14:49:11][358184574968608][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:49:11][358184574968608][360 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:49:11][358184574968608][360 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 14:49:11][358184574968608][360 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:49:11][358184574968608][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184574968608\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9495\"}'\'' -e'"" [2025-09-06 14:49:11][358184574968608][360 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:49:11][358184574968608][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184574968608\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9495\"}'\'' -e'"" [2025-09-06 14:49:17][358184574968608][5921 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a3d1ea2-38c8-45b0-8fbe-d07ede881b05","id":"QR_1a3d1ea2-38c8-45b0-8fbe-d07ede881b05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:49:17][358184574968608][6077 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-06 14:49:17][358184574968608][6077 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-06 14:49:17][358184574968608][6077 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:50:04][352600226110170][0 ms][INFO] === Request start === [2025-09-06 14:50:04][352600226110170][1 ms][DEBUG] START check_scloud [2025-09-06 14:50:04][352600226110170][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:50:04][352600226110170][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 10252 22065 24911404 229600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:50:04][352600226110170][307 ms][DEBUG] targetPkg: running [2025-09-06 14:50:04][352600226110170][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 14:50:04][352600226110170][307 ms][DEBUG] START check_boot_completed [2025-09-06 14:50:04][352600226110170][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:50:04][352600226110170][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:50:04][352600226110170][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:50:04][352600226110170][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:50:04][352600226110170][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:50:04][352600226110170][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:50:04][352600226110170][525 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2579\nsuccessfulTxPacketsPerSecond: 1.7312745520217243\nretriedTxPackets: 579\nretriedTxPacketsPerSecond: 0.3603160235172117\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2401\nsuccessfulRxPacketsPerSecond: 1.4544463876121594\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:50:04][352600226110170][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:50:05][352600226110170][1947 ms][DEBUG] SU: done in 1421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.494/300.494/300.494/0.000 ms\n [2025-09-06 14:50:05][352600226110170][1947 ms][DEBUG] check_internet: online [2025-09-06 14:50:05][352600226110170][1947 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:50:05][352600226110170][1947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226110170\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2191\"}'\'' -e'"" [2025-09-06 14:50:05][352600226110170][1947 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:50:05][352600226110170][1947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226110170\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2191\"}'\'' -e'"" [2025-09-06 14:50:09][352600226110170][5821 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f858ccd-eb4d-418b-8c93-2f19a506a710","id":"QR_7f858ccd-eb4d-418b-8c93-2f19a506a710","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:50:09][352600226110170][5977 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-06 14:50:09][352600226110170][5977 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-06 14:50:09][352600226110170][5978 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:50:12][352600226110170][0 ms][INFO] === Request start === [2025-09-06 14:50:12][352600226110170][1 ms][DEBUG] START check_scloud [2025-09-06 14:50:12][352600226110170][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:50:12][352600226110170][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 10252 22065 25035572 240556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:50:12][352600226110170][303 ms][DEBUG] targetPkg: running [2025-09-06 14:50:12][352600226110170][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 14:50:12][352600226110170][303 ms][DEBUG] START check_boot_completed [2025-09-06 14:50:12][352600226110170][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:50:12][352600226110170][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:50:12][352600226110170][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:50:12][352600226110170][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:50:12][352600226110170][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:50:12][352600226110170][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:50:12][352600226110170][521 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2579\nsuccessfulTxPacketsPerSecond: 1.7312745520217243\nretriedTxPackets: 579\nretriedTxPacketsPerSecond: 0.3603160235172117\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2401\nsuccessfulRxPacketsPerSecond: 1.4544463876121594\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:50:12][352600226110170][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:50:13][352600226110170][927 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=295 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 295.197/295.197/295.197/0.000 ms\n [2025-09-06 14:50:13][352600226110170][927 ms][DEBUG] check_internet: online [2025-09-06 14:50:13][352600226110170][928 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:50:13][352600226110170][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226110170\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8580\"}'\'' -e'"" [2025-09-06 14:50:13][352600226110170][928 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:50:13][352600226110170][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226110170\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8580\"}'\'' -e'"" [2025-09-06 14:50:17][352600226110170][4942 ms][DEBUG] proc_open done in 4014 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 14:50:17][352600226110170][4942 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-09-06 14:50:17][352600226110170][4942 ms][WARN] Detected error: Process with pid 10252 either refused to load frida-agent, or terminated during injectionProcess with pid 10252 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 14:50:17][352600226110170][4942 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 14:50:17][352600226110170][5208 ms][DEBUG] SU: done in 266 ms; outsystem 22396 22065 12620516 186204 ep_poll 0 S system_server\n [2025-09-06 14:50:17][352600226110170][5208 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 14:50:17][352600226110170][5348 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 14:50:17][352600226110170][5348 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 14:50:17][352600226110170][5348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 14:50:17][352600226110170][5489 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 14:50:17][352600226110170][5489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 14:50:17][352600226110170][5645 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 14:50:19][352600226110170][7660 ms][DEBUG] START check_boot_completed [2025-09-06 14:50:19][352600226110170][7660 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:50:20][352600226110170][7707 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:50:20][352600226110170][7707 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:50:20][352600226110170][7754 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:50:20][352600226110170][7754 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:50:23][352600226110170][10769 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 14:50:23][352600226110170][10769 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226110170\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8580\"}'\'' -e'"" [2025-09-06 14:50:27][352600226110170][15689 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8519b6c9-8784-43f1-a686-7213277fe795","id":"QR_8519b6c9-8784-43f1-a686-7213277fe795","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:50:28][352600226110170][15846 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-09-06 14:50:28][352600226110170][15846 ms][DEBUG] END runCmdUntilRes#2 in 5077 ms [2025-09-06 14:50:28][352600226110170][15846 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:50:32][355355254705709][0 ms][INFO] === Request start === [2025-09-06 14:50:32][355355254705709][1 ms][DEBUG] START check_scloud [2025-09-06 14:50:32][355355254705709][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:50:32][355355254705709][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 11504 22065 23808160 124520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:50:32][355355254705709][290 ms][DEBUG] targetPkg: running [2025-09-06 14:50:32][355355254705709][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-06 14:50:32][355355254705709][290 ms][DEBUG] START check_boot_completed [2025-09-06 14:50:32][355355254705709][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:50:32][355355254705709][335 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 14:50:32][355355254705709][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:50:32][355355254705709][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:50:32][355355254705709][382 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 14:50:32][355355254705709][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:50:32][355355254705709][491 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2803\nsuccessfulTxPacketsPerSecond: 0.727532560329988\nretriedTxPackets: 637\nretriedTxPacketsPerSecond: 0.18837896651401476\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.6073597713469097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:50:32][355355254705709][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:50:33][355355254705709][913 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.329/290.329/290.329/0.000 ms\n [2025-09-06 14:50:33][355355254705709][913 ms][DEBUG] check_internet: online [2025-09-06 14:50:33][355355254705709][913 ms][DEBUG] rawBody.length=1149 [2025-09-06 14:50:33][355355254705709][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355254705709\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7265\"}'\'' -e'"" [2025-09-06 14:50:33][355355254705709][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:50:33][355355254705709][914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355254705709\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7265\"}'\'' -e'"" [2025-09-06 14:50:36][355355254705709][4303 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3067f9db-0c11-444c-a78a-595b5ef7aed0","id":"QR_3067f9db-0c11-444c-a78a-595b5ef7aed0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:50:36][355355254705709][4459 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=3343 [2025-09-06 14:50:36][355355254705709][4459 ms][DEBUG] END runCmdUntilRes#1 in 3545 ms [2025-09-06 14:50:36][355355254705709][4459 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:50:39][355355254705709][0 ms][INFO] === Request start === [2025-09-06 14:50:39][355355254705709][1 ms][DEBUG] START check_scloud [2025-09-06 14:50:39][355355254705709][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:50:39][355355254705709][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 11504 22065 23992820 138064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:50:39][355355254705709][300 ms][DEBUG] targetPkg: running [2025-09-06 14:50:39][355355254705709][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-06 14:50:39][355355254705709][300 ms][DEBUG] START check_boot_completed [2025-09-06 14:50:39][355355254705709][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:50:39][355355254705709][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:50:39][355355254705709][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:50:39][355355254705709][409 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:50:39][355355254705709][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:50:39][355355254705709][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:50:39][355355254705709][518 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2803\nsuccessfulTxPacketsPerSecond: 0.727532560329988\nretriedTxPackets: 637\nretriedTxPacketsPerSecond: 0.18837896651401476\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.6073597713469097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:50:39][355355254705709][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:50:40][355355254705709][956 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=312 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 312.473/312.473/312.473/0.000 ms\n [2025-09-06 14:50:40][355355254705709][956 ms][DEBUG] check_internet: online [2025-09-06 14:50:40][355355254705709][956 ms][DEBUG] rawBody.length=1159 [2025-09-06 14:50:40][355355254705709][956 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355254705709\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3432\"}'\'' -e'"" [2025-09-06 14:50:40][355355254705709][956 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:50:40][355355254705709][956 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355254705709\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3432\"}'\'' -e'"" [2025-09-06 14:50:44][355355254705709][5595 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6918ed7-ba5a-4014-b0b2-6627225340c1","id":"QR_d6918ed7-ba5a-4014-b0b2-6627225340c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:50:44][355355254705709][5751 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 14:50:44][355355254705709][5751 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-06 14:50:44][355355254705709][5751 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:51:03][353879730186376][0 ms][INFO] === Request start === [2025-09-06 14:51:03][353879730186376][1 ms][DEBUG] START check_scloud [2025-09-06 14:51:03][353879730186376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:51:03][353879730186376][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 11504 22065 24035452 150288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:51:03][353879730186376][315 ms][DEBUG] targetPkg: running [2025-09-06 14:51:03][353879730186376][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 14:51:03][353879730186376][315 ms][DEBUG] START check_boot_completed [2025-09-06 14:51:03][353879730186376][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:51:03][353879730186376][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:51:03][353879730186376][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:51:03][353879730186376][395 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 14:51:03][353879730186376][395 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-06 14:51:03][353879730186376][395 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:51:03][353879730186376][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353879730186376\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4355\"}'\'' -e'"" [2025-09-06 14:51:03][353879730186376][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:51:03][353879730186376][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353879730186376\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4355\"}'\'' -e'"" [2025-09-06 14:51:07][353879730186376][3720 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07f9e872-6e54-4813-9967-f9a927e4d185","id":"QR_07f9e872-6e54-4813-9967-f9a927e4d185","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:51:07][353879730186376][3877 ms][DEBUG] proc_open done in 3481 ms; code=255; res.len=3343 [2025-09-06 14:51:07][353879730186376][3877 ms][DEBUG] END runCmdUntilRes#1 in 3481 ms [2025-09-06 14:51:07][353879730186376][3877 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:51:09][353879730186376][0 ms][INFO] === Request start === [2025-09-06 14:51:09][353879730186376][1 ms][DEBUG] START check_scloud [2025-09-06 14:51:09][353879730186376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:51:09][353879730186376][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11504 22065 24179972 161200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:51:09][353879730186376][320 ms][DEBUG] targetPkg: running [2025-09-06 14:51:09][353879730186376][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 14:51:09][353879730186376][320 ms][DEBUG] START check_boot_completed [2025-09-06 14:51:09][353879730186376][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:51:09][353879730186376][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:51:09][353879730186376][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:51:09][353879730186376][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:51:09][353879730186376][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:51:09][353879730186376][414 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:51:09][353879730186376][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353879730186376\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9177\"}'\'' -e'"" [2025-09-06 14:51:09][353879730186376][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:51:09][353879730186376][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353879730186376\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9177\"}'\'' -e'"" [2025-09-06 14:51:14][353879730186376][5287 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd8fc78c-98f4-4cc8-a30a-c629cd5f4ca6","id":"QR_dd8fc78c-98f4-4cc8-a30a-c629cd5f4ca6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:51:14][353879730186376][5444 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-06 14:51:14][353879730186376][5444 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-09-06 14:51:14][353879730186376][5444 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:52:03][357629884346961][1 ms][INFO] === Request start === [2025-09-06 14:52:03][357629884346961][1 ms][DEBUG] START check_scloud [2025-09-06 14:52:03][357629884346961][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:52:03][357629884346961][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 11504 22065 24308164 171872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:52:03][357629884346961][304 ms][DEBUG] targetPkg: running [2025-09-06 14:52:03][357629884346961][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 14:52:03][357629884346961][304 ms][DEBUG] START check_boot_completed [2025-09-06 14:52:03][357629884346961][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:52:04][357629884346961][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:52:04][357629884346961][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:52:04][357629884346961][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:52:04][357629884346961][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:52:04][357629884346961][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:52:04][357629884346961][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2803\nsuccessfulTxPacketsPerSecond: 0.727532560329988\nretriedTxPackets: 637\nretriedTxPacketsPerSecond: 0.18837896651401476\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.6073597713469097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:52:04][357629884346961][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:52:04][357629884346961][944 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.057/341.057/341.057/0.000 ms\n [2025-09-06 14:52:04][357629884346961][945 ms][DEBUG] check_internet: online [2025-09-06 14:52:04][357629884346961][945 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:52:04][357629884346961][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357629884346961\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6333\"}'\'' -e'"" [2025-09-06 14:52:04][357629884346961][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:52:04][357629884346961][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357629884346961\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6333\"}'\'' -e'"" [2025-09-06 14:52:09][357629884346961][5896 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a75c7c4c-0e9f-4528-8201-3d31f251cb5d","id":"QR_a75c7c4c-0e9f-4528-8201-3d31f251cb5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:52:09][357629884346961][6053 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-06 14:52:09][357629884346961][6053 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 14:52:09][357629884346961][6053 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:52:12][357629884346961][0 ms][INFO] === Request start === [2025-09-06 14:52:12][357629884346961][1 ms][DEBUG] START check_scloud [2025-09-06 14:52:12][357629884346961][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:52:12][357629884346961][267 ms][DEBUG] SU: done in 267 ms; outu0_a118 11504 22065 24466124 183796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:52:12][357629884346961][268 ms][DEBUG] targetPkg: running [2025-09-06 14:52:12][357629884346961][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-06 14:52:12][357629884346961][268 ms][DEBUG] START check_boot_completed [2025-09-06 14:52:12][357629884346961][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:52:12][357629884346961][314 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:52:12][357629884346961][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:52:12][357629884346961][361 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:52:12][357629884346961][361 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:52:12][357629884346961][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:52:12][357629884346961][486 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2803\nsuccessfulTxPacketsPerSecond: 0.727532560329988\nretriedTxPackets: 637\nretriedTxPacketsPerSecond: 0.18837896651401476\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.6073597713469097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:52:12][357629884346961][486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:52:13][357629884346961][939 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=335 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 335.998/335.998/335.998/0.000 ms\n [2025-09-06 14:52:13][357629884346961][939 ms][DEBUG] check_internet: online [2025-09-06 14:52:13][357629884346961][939 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:52:13][357629884346961][939 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357629884346961\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1742\"}'\'' -e'"" [2025-09-06 14:52:13][357629884346961][939 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:52:13][357629884346961][939 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357629884346961\",\"model\":\"SM-A556B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1742\"}'\'' -e'"" [2025-09-06 14:52:18][357629884346961][6172 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_00ced702-79fd-4b32-a0b0-68d67aa0cffd","id":"QR_00ced702-79fd-4b32-a0b0-68d67aa0cffd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:52:18][357629884346961][6328 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-09-06 14:52:18][357629884346961][6328 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-06 14:52:18][357629884346961][6329 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:52:22][350013881342843][0 ms][INFO] === Request start === [2025-09-06 14:52:22][350013881342843][1 ms][DEBUG] START check_scloud [2025-09-06 14:52:22][350013881342843][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:52:22][350013881342843][260 ms][DEBUG] SU: done in 260 ms; outu0_a118 11504 22065 24581000 194876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:52:22][350013881342843][261 ms][DEBUG] targetPkg: running [2025-09-06 14:52:22][350013881342843][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 14:52:22][350013881342843][261 ms][DEBUG] START check_boot_completed [2025-09-06 14:52:22][350013881342843][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:52:22][350013881342843][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:52:22][350013881342843][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:52:23][350013881342843][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:52:23][350013881342843][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:52:23][350013881342843][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:52:23][350013881342843][463 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2803\nsuccessfulTxPacketsPerSecond: 0.727532560329988\nretriedTxPackets: 637\nretriedTxPacketsPerSecond: 0.18837896651401476\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.6073597713469097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:52:23][350013881342843][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:52:23][350013881342843][932 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=320 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 320.716/320.716/320.716/0.000 ms\n [2025-09-06 14:52:23][350013881342843][932 ms][DEBUG] check_internet: online [2025-09-06 14:52:23][350013881342843][932 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:52:23][350013881342843][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881342843\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4137\"}'\'' -e'"" [2025-09-06 14:52:23][350013881342843][932 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:52:23][350013881342843][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881342843\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4137\"}'\'' -e'"" [2025-09-06 14:52:27][350013881342843][4431 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee229faa-52cc-4523-aaa8-aa4f62d789fe","id":"QR_ee229faa-52cc-4523-aaa8-aa4f62d789fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:52:27][350013881342843][4587 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-06 14:52:27][350013881342843][4587 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-06 14:52:27][350013881342843][4587 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:52:29][350013881342843][0 ms][INFO] === Request start === [2025-09-06 14:52:29][350013881342843][1 ms][DEBUG] START check_scloud [2025-09-06 14:52:29][350013881342843][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:52:29][350013881342843][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 11504 22065 24725548 206820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:52:29][350013881342843][257 ms][DEBUG] targetPkg: running [2025-09-06 14:52:29][350013881342843][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-06 14:52:29][350013881342843][257 ms][DEBUG] START check_boot_completed [2025-09-06 14:52:29][350013881342843][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:52:29][350013881342843][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:52:29][350013881342843][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:52:30][350013881342843][336 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 14:52:30][350013881342843][336 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 14:52:30][350013881342843][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:52:30][350013881342843][460 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2803\nsuccessfulTxPacketsPerSecond: 0.727532560329988\nretriedTxPackets: 637\nretriedTxPacketsPerSecond: 0.18837896651401476\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.6073597713469097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:52:30][350013881342843][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:52:30][350013881342843][866 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.262/255.262/255.262/0.000 ms\n [2025-09-06 14:52:30][350013881342843][866 ms][DEBUG] check_internet: online [2025-09-06 14:52:30][350013881342843][866 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:52:30][350013881342843][866 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881342843\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8757\"}'\'' -e'"" [2025-09-06 14:52:30][350013881342843][866 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:52:30][350013881342843][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881342843\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8757\"}'\'' -e'"" [2025-09-06 14:52:35][350013881342843][5709 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f5d7e82-93d4-4bba-91bb-9c33b6f55f5d","id":"QR_8f5d7e82-93d4-4bba-91bb-9c33b6f55f5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:52:35][350013881342843][5865 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-06 14:52:35][350013881342843][5865 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-06 14:52:35][350013881342843][5865 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:54:09][352288966894995][1 ms][INFO] === Request start === [2025-09-06 14:54:09][352288966894995][1 ms][DEBUG] START check_scloud [2025-09-06 14:54:09][352288966894995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:54:09][352288966894995][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 11504 22065 24845384 218264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:54:09][352288966894995][310 ms][DEBUG] targetPkg: running [2025-09-06 14:54:09][352288966894995][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 14:54:09][352288966894995][310 ms][DEBUG] START check_boot_completed [2025-09-06 14:54:09][352288966894995][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:54:09][352288966894995][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:54:09][352288966894995][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:54:09][352288966894995][419 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 14:54:09][352288966894995][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 14:54:09][352288966894995][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:54:09][352288966894995][528 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2803\nsuccessfulTxPacketsPerSecond: 0.727532560329988\nretriedTxPackets: 637\nretriedTxPacketsPerSecond: 0.18837896651401476\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.6073597713469097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:54:09][352288966894995][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:54:10][352288966894995][1887 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.505/300.505/300.505/0.000 ms\n [2025-09-06 14:54:10][352288966894995][1887 ms][DEBUG] check_internet: online [2025-09-06 14:54:10][352288966894995][1887 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:54:10][352288966894995][1887 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966894995\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8269\"}'\'' -e'"" [2025-09-06 14:54:10][352288966894995][1887 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:54:10][352288966894995][1887 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966894995\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8269\"}'\'' -e'"" [2025-09-06 14:54:16][352288966894995][6949 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca2fa95f-1062-42ed-8fb3-5fc3d8452bd6","id":"QR_ca2fa95f-1062-42ed-8fb3-5fc3d8452bd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:54:16][352288966894995][7105 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 14:54:16][352288966894995][7105 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 14:54:16][352288966894995][7105 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:54:20][357042149190861][0 ms][INFO] === Request start === [2025-09-06 14:54:20][357042149190861][1 ms][DEBUG] START check_scloud [2025-09-06 14:54:20][357042149190861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:54:20][357042149190861][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 11504 22065 24998224 230140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:54:20][357042149190861][292 ms][DEBUG] targetPkg: running [2025-09-06 14:54:20][357042149190861][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 14:54:20][357042149190861][292 ms][DEBUG] START check_boot_completed [2025-09-06 14:54:20][357042149190861][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:54:21][357042149190861][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:54:21][357042149190861][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:54:21][357042149190861][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:54:21][357042149190861][371 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 14:54:21][357042149190861][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:54:21][357042149190861][511 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2803\nsuccessfulTxPacketsPerSecond: 0.727532560329988\nretriedTxPackets: 637\nretriedTxPacketsPerSecond: 0.18837896651401476\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.6073597713469097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:54:21][357042149190861][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:54:21][357042149190861][948 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=324 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 324.722/324.722/324.722/0.000 ms\n [2025-09-06 14:54:21][357042149190861][948 ms][DEBUG] check_internet: online [2025-09-06 14:54:21][357042149190861][948 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:54:21][357042149190861][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042149190861\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2910\"}'\'' -e'"" [2025-09-06 14:54:21][357042149190861][949 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:54:21][357042149190861][949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042149190861\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2910\"}'\'' -e'"" [2025-09-06 14:54:25][357042149190861][4697 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ccbe920a-a52c-4e37-8872-4f3ca0cd3c7f","id":"QR_ccbe920a-a52c-4e37-8872-4f3ca0cd3c7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:54:25][357042149190861][4853 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-06 14:54:25][357042149190861][4853 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-06 14:54:25][357042149190861][4853 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:54:27][357042149190861][0 ms][INFO] === Request start === [2025-09-06 14:54:27][357042149190861][1 ms][DEBUG] START check_scloud [2025-09-06 14:54:27][357042149190861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:54:28][357042149190861][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 11504 22065 25138776 241136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:54:28][357042149190861][274 ms][DEBUG] targetPkg: running [2025-09-06 14:54:28][357042149190861][274 ms][DEBUG] END check_scloud in 274 ms [2025-09-06 14:54:28][357042149190861][274 ms][DEBUG] START check_boot_completed [2025-09-06 14:54:28][357042149190861][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:54:28][357042149190861][321 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:54:28][357042149190861][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:54:28][357042149190861][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:54:28][357042149190861][368 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:54:28][357042149190861][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 14:54:28][357042149190861][493 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2803\nsuccessfulTxPacketsPerSecond: 0.727532560329988\nretriedTxPackets: 637\nretriedTxPacketsPerSecond: 0.18837896651401476\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2588\nsuccessfulRxPacketsPerSecond: 0.6073597713469097\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 14:54:28][357042149190861][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 14:54:28][357042149190861][883 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.253/273.253/273.253/0.000 ms\n [2025-09-06 14:54:28][357042149190861][884 ms][DEBUG] check_internet: online [2025-09-06 14:54:28][357042149190861][884 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:54:28][357042149190861][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042149190861\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4436\"}'\'' -e'"" [2025-09-06 14:54:28][357042149190861][884 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:54:28][357042149190861][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042149190861\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4436\"}'\'' -e'"" [2025-09-06 14:54:32][357042149190861][4633 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 14:54:32][357042149190861][4633 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-09-06 14:54:32][357042149190861][4633 ms][WARN] Detected error: Process with pid 11504 either refused to load frida-agent, or terminated during injectionProcess with pid 11504 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 14:54:32][357042149190861][4633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 14:54:32][357042149190861][4929 ms][DEBUG] SU: done in 297 ms; outsystem 22396 22065 12620516 174268 ep_poll 0 S system_server\n [2025-09-06 14:54:32][357042149190861][4929 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 14:54:33][357042149190861][5070 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 14:54:33][357042149190861][5070 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 14:54:33][357042149190861][5070 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 14:54:33][357042149190861][5210 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 14:54:33][357042149190861][5211 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 14:54:33][357042149190861][5353 ms][DEBUG] SU: done in 142 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 14:54:35][357042149190861][7366 ms][DEBUG] START check_boot_completed [2025-09-06 14:54:35][357042149190861][7366 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:54:35][357042149190861][7413 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:54:35][357042149190861][7413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:54:35][357042149190861][7460 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:54:35][357042149190861][7460 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 14:54:38][357042149190861][10475 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 14:54:38][357042149190861][10475 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042149190861\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4436\"}'\'' -e'"" [2025-09-06 14:54:43][357042149190861][15130 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a988ca75-b643-4ae2-a995-61f19fb1483c","id":"QR_a988ca75-b643-4ae2-a995-61f19fb1483c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:54:43][357042149190861][15286 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-06 14:54:43][357042149190861][15286 ms][DEBUG] END runCmdUntilRes#2 in 4812 ms [2025-09-06 14:54:43][357042149190861][15286 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:59:04][357962502440829][1 ms][INFO] === Request start === [2025-09-06 14:59:04][357962502440829][1 ms][DEBUG] START check_scloud [2025-09-06 14:59:04][357962502440829][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:59:04][357962502440829][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 13287 22065 23837160 126948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:59:04][357962502440829][244 ms][DEBUG] targetPkg: running [2025-09-06 14:59:04][357962502440829][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-06 14:59:04][357962502440829][244 ms][DEBUG] START check_boot_completed [2025-09-06 14:59:04][357962502440829][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:59:04][357962502440829][276 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:59:04][357962502440829][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:59:04][357962502440829][324 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 14:59:04][357962502440829][325 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-06 14:59:04][357962502440829][325 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:59:04][357962502440829][325 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502440829\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1457\"}'\'' -e'"" [2025-09-06 14:59:04][357962502440829][325 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:59:04][357962502440829][325 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502440829\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1457\"}'\'' -e'"" [2025-09-06 14:59:08][357962502440829][4899 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39d9f8a0-017d-46be-bb57-ee4b11cb5f7f","id":"QR_39d9f8a0-017d-46be-bb57-ee4b11cb5f7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:59:09][357962502440829][5056 ms][DEBUG] proc_open done in 4731 ms; code=255; res.len=3343 [2025-09-06 14:59:09][357962502440829][5056 ms][DEBUG] END runCmdUntilRes#1 in 4731 ms [2025-09-06 14:59:09][357962502440829][5056 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:59:11][357962502440829][0 ms][INFO] === Request start === [2025-09-06 14:59:11][357962502440829][1 ms][DEBUG] START check_scloud [2025-09-06 14:59:11][357962502440829][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:59:11][357962502440829][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 13287 22065 23996144 137808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:59:11][357962502440829][321 ms][DEBUG] targetPkg: running [2025-09-06 14:59:11][357962502440829][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 14:59:11][357962502440829][321 ms][DEBUG] START check_boot_completed [2025-09-06 14:59:11][357962502440829][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:59:11][357962502440829][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 14:59:11][357962502440829][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:59:11][357962502440829][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:59:11][357962502440829][399 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 14:59:11][357962502440829][399 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:59:11][357962502440829][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502440829\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5939\"}'\'' -e'"" [2025-09-06 14:59:11][357962502440829][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:59:11][357962502440829][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502440829\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5939\"}'\'' -e'"" [2025-09-06 14:59:17][357962502440829][5757 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ee1f10d-41f8-4fdc-bf08-80bf6fd55002","id":"QR_9ee1f10d-41f8-4fdc-bf08-80bf6fd55002","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:59:17][357962502440829][5913 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-06 14:59:17][357962502440829][5913 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-06 14:59:17][357962502440829][5913 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:59:21][352132626564392][0 ms][INFO] === Request start === [2025-09-06 14:59:21][352132626564392][1 ms][DEBUG] START check_scloud [2025-09-06 14:59:21][352132626564392][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:59:21][352132626564392][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 13287 22065 24163320 149688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:59:21][352132626564392][309 ms][DEBUG] targetPkg: running [2025-09-06 14:59:21][352132626564392][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 14:59:21][352132626564392][309 ms][DEBUG] START check_boot_completed [2025-09-06 14:59:21][352132626564392][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:59:21][352132626564392][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 14:59:21][352132626564392][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:59:22][352132626564392][434 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 14:59:22][352132626564392][434 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 14:59:22][352132626564392][434 ms][DEBUG] rawBody.length=1150 [2025-09-06 14:59:22][352132626564392][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132626564392\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8481\"}'\'' -e'"" [2025-09-06 14:59:22][352132626564392][434 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:59:22][352132626564392][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132626564392\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8481\"}'\'' -e'"" [2025-09-06 14:59:25][352132626564392][3980 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6769431a-efed-4dfd-80ec-9076bae76974","id":"QR_6769431a-efed-4dfd-80ec-9076bae76974","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:59:25][352132626564392][4136 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-06 14:59:25][352132626564392][4136 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-06 14:59:25][352132626564392][4136 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 14:59:28][352132626564392][0 ms][INFO] === Request start === [2025-09-06 14:59:28][352132626564392][1 ms][DEBUG] START check_scloud [2025-09-06 14:59:28][352132626564392][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 14:59:28][352132626564392][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 13287 22065 24306716 160440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 14:59:28][352132626564392][249 ms][DEBUG] targetPkg: running [2025-09-06 14:59:28][352132626564392][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-06 14:59:28][352132626564392][249 ms][DEBUG] START check_boot_completed [2025-09-06 14:59:28][352132626564392][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 14:59:28][352132626564392][295 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 14:59:28][352132626564392][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 14:59:28][352132626564392][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 14:59:28][352132626564392][342 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 14:59:28][352132626564392][342 ms][DEBUG] rawBody.length=1160 [2025-09-06 14:59:28][352132626564392][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132626564392\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8471\"}'\'' -e'"" [2025-09-06 14:59:28][352132626564392][342 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 14:59:28][352132626564392][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132626564392\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8471\"}'\'' -e'"" [2025-09-06 14:59:33][352132626564392][5137 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e43d5fd3-e222-4099-9b1f-02aadbae972b","id":"QR_e43d5fd3-e222-4099-9b1f-02aadbae972b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 14:59:33][352132626564392][5293 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-06 14:59:33][352132626564392][5293 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-06 14:59:33][352132626564392][5294 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:02:03][356835258391043][1 ms][INFO] === Request start === [2025-09-06 15:02:03][356835258391043][1 ms][DEBUG] START check_scloud [2025-09-06 15:02:03][356835258391043][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:02:03][356835258391043][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 13287 22065 24420600 171924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:02:03][356835258391043][302 ms][DEBUG] targetPkg: running [2025-09-06 15:02:03][356835258391043][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 15:02:03][356835258391043][302 ms][DEBUG] START check_boot_completed [2025-09-06 15:02:03][356835258391043][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:02:03][356835258391043][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:02:03][356835258391043][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:02:04][356835258391043][397 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 15:02:04][356835258391043][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:02:04][356835258391043][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:02:04][356835258391043][521 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3265\nsuccessfulTxPacketsPerSecond: 0.44169757996220665\nretriedTxPackets: 754\nretriedTxPacketsPerSecond: 0.09630999863837589\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2991\nsuccessfulRxPacketsPerSecond: 0.4051662011683399\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:02:04][356835258391043][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:02:05][356835258391043][1911 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.986/300.986/300.986/0.000 ms\n [2025-09-06 15:02:05][356835258391043][1911 ms][DEBUG] check_internet: online [2025-09-06 15:02:05][356835258391043][1911 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:02:05][356835258391043][1912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356835258391043\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1689\"}'\'' -e'"" [2025-09-06 15:02:05][356835258391043][1912 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:02:05][356835258391043][1912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356835258391043\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1689\"}'\'' -e'"" [2025-09-06 15:02:09][356835258391043][5754 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c3c51be-46d9-44e7-b338-3c6ddcc4c9bd","id":"QR_2c3c51be-46d9-44e7-b338-3c6ddcc4c9bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:02:09][356835258391043][5910 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-06 15:02:09][356835258391043][5910 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-06 15:02:09][356835258391043][5910 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:02:11][356835258391043][0 ms][INFO] === Request start === [2025-09-06 15:02:11][356835258391043][1 ms][DEBUG] START check_scloud [2025-09-06 15:02:11][356835258391043][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:02:12][356835258391043][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 13287 22065 24575360 183948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:02:12][356835258391043][318 ms][DEBUG] targetPkg: running [2025-09-06 15:02:12][356835258391043][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 15:02:12][356835258391043][318 ms][DEBUG] START check_boot_completed [2025-09-06 15:02:12][356835258391043][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:02:12][356835258391043][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:02:12][356835258391043][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:02:12][356835258391043][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:02:12][356835258391043][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:02:12][356835258391043][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:02:12][356835258391043][536 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3265\nsuccessfulTxPacketsPerSecond: 0.44169757996220665\nretriedTxPackets: 754\nretriedTxPacketsPerSecond: 0.09630999863837589\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2991\nsuccessfulRxPacketsPerSecond: 0.4051662011683399\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:02:12][356835258391043][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:02:12][356835258391043][1005 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=324 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 324.549/324.549/324.549/0.000 ms\n [2025-09-06 15:02:12][356835258391043][1005 ms][DEBUG] check_internet: online [2025-09-06 15:02:12][356835258391043][1005 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:02:12][356835258391043][1005 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356835258391043\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7810\"}'\'' -e'"" [2025-09-06 15:02:12][356835258391043][1005 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:02:12][356835258391043][1005 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356835258391043\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7810\"}'\'' -e'"" [2025-09-06 15:02:17][356835258391043][5956 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f5b8fc0-62e2-4ea2-9c21-8f7f8c8b5d68","id":"QR_8f5b8fc0-62e2-4ea2-9c21-8f7f8c8b5d68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:02:18][356835258391043][6113 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 15:02:18][356835258391043][6113 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 15:02:18][356835258391043][6113 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:02:23][352672512801390][0 ms][INFO] === Request start === [2025-09-06 15:02:23][352672512801390][1 ms][DEBUG] START check_scloud [2025-09-06 15:02:23][352672512801390][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:02:23][352672512801390][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 13287 22065 24742024 194912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:02:23][352672512801390][286 ms][DEBUG] targetPkg: running [2025-09-06 15:02:23][352672512801390][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 15:02:23][352672512801390][286 ms][DEBUG] START check_boot_completed [2025-09-06 15:02:23][352672512801390][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:02:23][352672512801390][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:02:23][352672512801390][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:02:23][352672512801390][395 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 15:02:23][352672512801390][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:02:23][352672512801390][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:02:23][352672512801390][535 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3265\nsuccessfulTxPacketsPerSecond: 0.44169757996220665\nretriedTxPackets: 754\nretriedTxPacketsPerSecond: 0.09630999863837589\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2991\nsuccessfulRxPacketsPerSecond: 0.4051662011683399\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:02:23][352672512801390][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:02:24][352672512801390][910 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.054/250.054/250.054/0.000 ms\n [2025-09-06 15:02:24][352672512801390][910 ms][DEBUG] check_internet: online [2025-09-06 15:02:24][352672512801390][910 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:02:24][352672512801390][910 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672512801390\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4199\"}'\'' -e'"" [2025-09-06 15:02:24][352672512801390][910 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:02:24][352672512801390][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672512801390\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4199\"}'\'' -e'"" [2025-09-06 15:02:29][352672512801390][5659 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf7bd939-1c7b-4d08-bf55-eb6d80610a37","id":"QR_cf7bd939-1c7b-4d08-bf55-eb6d80610a37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:02:29][352672512801390][5815 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 15:02:29][352672512801390][5815 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 15:02:29][352672512801390][5815 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:02:32][352672512801390][0 ms][INFO] === Request start === [2025-09-06 15:02:32][352672512801390][1 ms][DEBUG] START check_scloud [2025-09-06 15:02:32][352672512801390][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:02:33][352672512801390][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 13287 22065 24878316 206736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:02:33][352672512801390][261 ms][DEBUG] targetPkg: running [2025-09-06 15:02:33][352672512801390][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 15:02:33][352672512801390][261 ms][DEBUG] START check_boot_completed [2025-09-06 15:02:33][352672512801390][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:02:33][352672512801390][308 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:02:33][352672512801390][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:02:33][352672512801390][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:02:33][352672512801390][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:02:33][352672512801390][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:02:33][352672512801390][464 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3265\nsuccessfulTxPacketsPerSecond: 0.44169757996220665\nretriedTxPackets: 754\nretriedTxPacketsPerSecond: 0.09630999863837589\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2991\nsuccessfulRxPacketsPerSecond: 0.4051662011683399\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:02:33][352672512801390][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:02:33][352672512801390][823 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.250/253.250/253.250/0.000 ms\n [2025-09-06 15:02:33][352672512801390][823 ms][DEBUG] check_internet: online [2025-09-06 15:02:33][352672512801390][823 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:02:33][352672512801390][823 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672512801390\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8820\"}'\'' -e'"" [2025-09-06 15:02:33][352672512801390][823 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:02:33][352672512801390][823 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672512801390\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8820\"}'\'' -e'"" [2025-09-06 15:02:37][352672512801390][4306 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58c2c653-a66a-4abe-ac26-4961bfde80ef","id":"QR_58c2c653-a66a-4abe-ac26-4961bfde80ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:02:37][352672512801390][4463 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-09-06 15:02:37][352672512801390][4463 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-09-06 15:02:37][352672512801390][4463 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:03:04][356927263369203][0 ms][INFO] === Request start === [2025-09-06 15:03:04][356927263369203][1 ms][DEBUG] START check_scloud [2025-09-06 15:03:04][356927263369203][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:03:05][356927263369203][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 13287 22065 25010440 217636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:03:05][356927263369203][265 ms][DEBUG] targetPkg: running [2025-09-06 15:03:05][356927263369203][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-06 15:03:05][356927263369203][265 ms][DEBUG] START check_boot_completed [2025-09-06 15:03:05][356927263369203][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:03:05][356927263369203][312 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:03:05][356927263369203][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:03:05][356927263369203][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:03:05][356927263369203][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:03:05][356927263369203][359 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:03:05][356927263369203][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927263369203\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2187\"}'\'' -e'"" [2025-09-06 15:03:05][356927263369203][359 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:03:05][356927263369203][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927263369203\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2187\"}'\'' -e'"" [2025-09-06 15:03:09][356927263369203][5154 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_857df08f-096a-4f3d-b1c2-f7138c41c6c0","id":"QR_857df08f-096a-4f3d-b1c2-f7138c41c6c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:03:10][356927263369203][5310 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-06 15:03:10][356927263369203][5310 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-06 15:03:10][356927263369203][5310 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:03:13][356927263369203][0 ms][INFO] === Request start === [2025-09-06 15:03:13][356927263369203][1 ms][DEBUG] START check_scloud [2025-09-06 15:03:13][356927263369203][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:03:13][356927263369203][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 13287 22065 25157140 229768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:03:13][356927263369203][249 ms][DEBUG] targetPkg: running [2025-09-06 15:03:13][356927263369203][249 ms][DEBUG] END check_scloud in 249 ms [2025-09-06 15:03:13][356927263369203][249 ms][DEBUG] START check_boot_completed [2025-09-06 15:03:13][356927263369203][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:03:13][356927263369203][296 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:03:13][356927263369203][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:03:14][356927263369203][343 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:03:14][356927263369203][343 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:03:14][356927263369203][343 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:03:14][356927263369203][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927263369203\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4365\"}'\'' -e'"" [2025-09-06 15:03:14][356927263369203][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:03:14][356927263369203][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927263369203\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4365\"}'\'' -e'"" [2025-09-06 15:03:18][356927263369203][4951 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26131034-8ee4-49f3-9796-5459ae32f2fd","id":"QR_26131034-8ee4-49f3-9796-5459ae32f2fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:03:18][356927263369203][5107 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-06 15:03:18][356927263369203][5107 ms][DEBUG] END runCmdUntilRes#1 in 4765 ms [2025-09-06 15:03:18][356927263369203][5108 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:03:22][357651713889946][0 ms][INFO] === Request start === [2025-09-06 15:03:22][357651713889946][1 ms][DEBUG] START check_scloud [2025-09-06 15:03:22][357651713889946][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:03:22][357651713889946][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 13287 22065 25293596 240704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:03:22][357651713889946][304 ms][DEBUG] targetPkg: running [2025-09-06 15:03:22][357651713889946][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 15:03:22][357651713889946][304 ms][DEBUG] START check_boot_completed [2025-09-06 15:03:22][357651713889946][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:03:22][357651713889946][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:03:22][357651713889946][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:03:22][357651713889946][413 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 15:03:22][357651713889946][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:03:22][357651713889946][414 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:03:22][357651713889946][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651713889946\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9202\"}'\'' -e'"" [2025-09-06 15:03:22][357651713889946][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:03:22][357651713889946][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651713889946\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9202\"}'\'' -e'"" [2025-09-06 15:03:26][357651713889946][4147 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 15:03:26][357651713889946][4147 ms][DEBUG] END runCmdUntilRes#1 in 3734 ms [2025-09-06 15:03:26][357651713889946][4147 ms][WARN] Detected error: Process with pid 13287 either refused to load frida-agent, or terminated during injectionProcess with pid 13287 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 15:03:26][357651713889946][4147 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 15:03:26][357651713889946][4412 ms][DEBUG] SU: done in 265 ms; outsystem 22396 22065 12620516 177568 ep_poll 0 S system_server\n [2025-09-06 15:03:26][357651713889946][4412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 15:03:26][357651713889946][4537 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 15:03:26][357651713889946][4537 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 15:03:26][357651713889946][4537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 15:03:26][357651713889946][4662 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 15:03:26][357651713889946][4662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 15:03:26][357651713889946][4834 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 15:03:28][357651713889946][6849 ms][DEBUG] START check_boot_completed [2025-09-06 15:03:28][357651713889946][6849 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:03:28][357651713889946][6896 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:03:28][357651713889946][6896 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:03:28][357651713889946][6959 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:03:28][357651713889946][6959 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:03:31][357651713889946][9973 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 15:03:31][357651713889946][9974 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651713889946\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9202\"}'\'' -e'"" [2025-09-06 15:03:37][357651713889946][15441 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf667195-bcb2-48f2-b205-f64137607d3f","id":"QR_cf667195-bcb2-48f2-b205-f64137607d3f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:03:37][357651713889946][15597 ms][DEBUG] proc_open done in 5624 ms; code=255; res.len=3343 [2025-09-06 15:03:37][357651713889946][15597 ms][DEBUG] END runCmdUntilRes#2 in 5624 ms [2025-09-06 15:03:37][357651713889946][15597 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:03:42][357651713889946][0 ms][INFO] === Request start === [2025-09-06 15:03:42][357651713889946][1 ms][DEBUG] START check_scloud [2025-09-06 15:03:42][357651713889946][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:03:42][357651713889946][237 ms][DEBUG] SU: done in 236 ms; outu0_a118 14593 22065 23873376 124380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:03:42][357651713889946][237 ms][DEBUG] targetPkg: running [2025-09-06 15:03:42][357651713889946][237 ms][DEBUG] END check_scloud in 236 ms [2025-09-06 15:03:42][357651713889946][237 ms][DEBUG] START check_boot_completed [2025-09-06 15:03:42][357651713889946][237 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:03:42][357651713889946][268 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:03:42][357651713889946][268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:03:42][357651713889946][316 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 15:03:42][357651713889946][316 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 15:03:42][357651713889946][316 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:03:42][357651713889946][316 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651713889946\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9565\"}'\'' -e'"" [2025-09-06 15:03:42][357651713889946][316 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:03:42][357651713889946][316 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651713889946\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9565\"}'\'' -e'"" [2025-09-06 15:03:45][357651713889946][3768 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aaae89b6-45b1-4f72-9487-e68a11b54280","id":"QR_aaae89b6-45b1-4f72-9487-e68a11b54280","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:03:46][357651713889946][3924 ms][DEBUG] proc_open done in 3607 ms; code=255; res.len=3343 [2025-09-06 15:03:46][357651713889946][3924 ms][DEBUG] END runCmdUntilRes#1 in 3607 ms [2025-09-06 15:03:46][357651713889946][3924 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:04:03][356722919184621][0 ms][INFO] === Request start === [2025-09-06 15:04:03][356722919184621][1 ms][DEBUG] START check_scloud [2025-09-06 15:04:03][356722919184621][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:04:03][356722919184621][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 14593 22065 23916156 138084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:04:03][356722919184621][267 ms][DEBUG] targetPkg: running [2025-09-06 15:04:03][356722919184621][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-06 15:04:03][356722919184621][267 ms][DEBUG] START check_boot_completed [2025-09-06 15:04:03][356722919184621][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:04:03][356722919184621][313 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:04:03][356722919184621][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:04:03][356722919184621][360 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:04:03][356722919184621][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:04:03][356722919184621][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:04:03][356722919184621][470 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3265\nsuccessfulTxPacketsPerSecond: 0.44169757996220665\nretriedTxPackets: 754\nretriedTxPacketsPerSecond: 0.09630999863837589\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2991\nsuccessfulRxPacketsPerSecond: 0.4051662011683399\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:04:03][356722919184621][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:04:04][356722919184621][923 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=327 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 327.179/327.179/327.179/0.000 ms\n [2025-09-06 15:04:04][356722919184621][923 ms][DEBUG] check_internet: online [2025-09-06 15:04:04][356722919184621][923 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:04:04][356722919184621][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722919184621\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8975\"}'\'' -e'"" [2025-09-06 15:04:04][356722919184621][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:04:04][356722919184621][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722919184621\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8975\"}'\'' -e'"" [2025-09-06 15:04:07][356722919184621][4390 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5743f09c-8a77-4b07-81ea-4ffb3d85c4fd","id":"QR_5743f09c-8a77-4b07-81ea-4ffb3d85c4fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:04:07][356722919184621][4547 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=3343 [2025-09-06 15:04:07][356722919184621][4547 ms][DEBUG] END runCmdUntilRes#1 in 3623 ms [2025-09-06 15:04:07][356722919184621][4547 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:05:03][350832412337315][1 ms][INFO] === Request start === [2025-09-06 15:05:03][350832412337315][1 ms][DEBUG] START check_scloud [2025-09-06 15:05:03][350832412337315][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:05:03][350832412337315][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 14593 22065 24043872 149340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:05:03][350832412337315][303 ms][DEBUG] targetPkg: running [2025-09-06 15:05:03][350832412337315][303 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 15:05:03][350832412337315][303 ms][DEBUG] START check_boot_completed [2025-09-06 15:05:03][350832412337315][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:05:03][350832412337315][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:05:03][350832412337315][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:05:03][350832412337315][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:05:03][350832412337315][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 15:05:03][350832412337315][381 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:05:03][350832412337315][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832412337315\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5680\"}'\'' -e'"" [2025-09-06 15:05:03][350832412337315][381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:05:03][350832412337315][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832412337315\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5680\"}'\'' -e'"" [2025-09-06 15:05:08][350832412337315][5067 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94cdd409-960c-41a2-9bbf-b621cb64e885","id":"QR_94cdd409-960c-41a2-9bbf-b621cb64e885","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:05:08][350832412337315][5223 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-06 15:05:08][350832412337315][5223 ms][DEBUG] END runCmdUntilRes#1 in 4843 ms [2025-09-06 15:05:08][350832412337315][5223 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:05:10][350832412337315][0 ms][INFO] === Request start === [2025-09-06 15:05:10][350832412337315][1 ms][DEBUG] START check_scloud [2025-09-06 15:05:10][350832412337315][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:05:11][350832412337315][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 14593 22065 24235708 160336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:05:11][350832412337315][300 ms][DEBUG] targetPkg: running [2025-09-06 15:05:11][350832412337315][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 15:05:11][350832412337315][300 ms][DEBUG] START check_boot_completed [2025-09-06 15:05:11][350832412337315][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:05:11][350832412337315][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:05:11][350832412337315][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:05:11][350832412337315][409 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:05:11][350832412337315][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:05:11][350832412337315][409 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:05:11][350832412337315][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832412337315\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9654\"}'\'' -e'"" [2025-09-06 15:05:11][350832412337315][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:05:11][350832412337315][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832412337315\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9654\"}'\'' -e'"" [2025-09-06 15:05:16][350832412337315][5470 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2974191c-b343-4329-b313-c3a8be867682","id":"QR_2974191c-b343-4329-b313-c3a8be867682","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:05:16][350832412337315][5626 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 15:05:16][350832412337315][5626 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 15:05:16][350832412337315][5626 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:06:04][352665185977745][0 ms][INFO] === Request start === [2025-09-06 15:06:04][352665185977745][1 ms][DEBUG] START check_scloud [2025-09-06 15:06:04][352665185977745][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:06:04][352665185977745][272 ms][DEBUG] SU: done in 272 ms; outu0_a118 14593 22065 24315632 171444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:06:04][352665185977745][272 ms][DEBUG] targetPkg: running [2025-09-06 15:06:04][352665185977745][272 ms][DEBUG] END check_scloud in 272 ms [2025-09-06 15:06:04][352665185977745][273 ms][DEBUG] START check_boot_completed [2025-09-06 15:06:04][352665185977745][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:06:04][352665185977745][319 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:06:04][352665185977745][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:06:04][352665185977745][413 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 15:06:04][352665185977745][413 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-06 15:06:04][352665185977745][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:06:04][352665185977745][522 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3568\nsuccessfulTxPacketsPerSecond: 1.0054987174084018\nretriedTxPackets: 830\nretriedTxPacketsPerSecond: 0.2522042987559027\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3251\nsuccessfulRxPacketsPerSecond: 0.8628041799544042\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:06:04][352665185977745][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:06:07][352665185977745][2600 ms][DEBUG] SU: done in 2077 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.621/299.621/299.621/0.000 ms\n [2025-09-06 15:06:07][352665185977745][2600 ms][DEBUG] check_internet: online [2025-09-06 15:06:07][352665185977745][2600 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:06:07][352665185977745][2600 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185977745\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1315\"}'\'' -e'"" [2025-09-06 15:06:07][352665185977745][2600 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:06:07][352665185977745][2600 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185977745\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1315\"}'\'' -e'"" [2025-09-06 15:06:10][352665185977745][6458 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a088fd66-868d-4f99-9db4-9f2047fb1bd1","id":"QR_a088fd66-868d-4f99-9db4-9f2047fb1bd1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:06:11][352665185977745][6614 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-06 15:06:11][352665185977745][6614 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-09-06 15:06:11][352665185977745][6614 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:06:13][352665185977745][0 ms][INFO] === Request start === [2025-09-06 15:06:13][352665185977745][1 ms][DEBUG] START check_scloud [2025-09-06 15:06:13][352665185977745][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:06:13][352665185977745][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 14593 22065 24486000 183288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:06:13][352665185977745][317 ms][DEBUG] targetPkg: running [2025-09-06 15:06:13][352665185977745][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 15:06:13][352665185977745][317 ms][DEBUG] START check_boot_completed [2025-09-06 15:06:13][352665185977745][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:06:13][352665185977745][364 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:06:13][352665185977745][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:06:13][352665185977745][411 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:06:13][352665185977745][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:06:13][352665185977745][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:06:13][352665185977745][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3568\nsuccessfulTxPacketsPerSecond: 1.0054987174084018\nretriedTxPackets: 830\nretriedTxPacketsPerSecond: 0.2522042987559027\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3251\nsuccessfulRxPacketsPerSecond: 0.8628041799544042\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:06:13][352665185977745][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:06:14][352665185977745][881 ms][DEBUG] SU: done in 361 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.272/264.272/264.272/0.000 ms\n [2025-09-06 15:06:14][352665185977745][882 ms][DEBUG] check_internet: online [2025-09-06 15:06:14][352665185977745][882 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:06:14][352665185977745][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185977745\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3494\"}'\'' -e'"" [2025-09-06 15:06:14][352665185977745][882 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:06:14][352665185977745][882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185977745\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3494\"}'\'' -e'"" [2025-09-06 15:06:19][352665185977745][5941 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c967061b-c5e1-4a13-950d-a7aa4df3fa7c","id":"QR_c967061b-c5e1-4a13-950d-a7aa4df3fa7c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:06:19][352665185977745][6097 ms][DEBUG] proc_open done in 5215 ms; code=255; res.len=3343 [2025-09-06 15:06:19][352665185977745][6097 ms][DEBUG] END runCmdUntilRes#1 in 5215 ms [2025-09-06 15:06:19][352665185977745][6097 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:12:03][352923541848823][1 ms][INFO] === Request start === [2025-09-06 15:12:03][352923541848823][1 ms][DEBUG] START check_scloud [2025-09-06 15:12:03][352923541848823][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:12:04][352923541848823][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 14593 22065 24592524 195408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:12:04][352923541848823][314 ms][DEBUG] targetPkg: running [2025-09-06 15:12:04][352923541848823][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 15:12:04][352923541848823][314 ms][DEBUG] START check_boot_completed [2025-09-06 15:12:04][352923541848823][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:12:04][352923541848823][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:12:04][352923541848823][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:12:04][352923541848823][408 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 15:12:04][352923541848823][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:12:04][352923541848823][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:12:04][352923541848823][533 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3676\nsuccessfulTxPacketsPerSecond: 0.4417304380902521\nretriedTxPackets: 857\nretriedTxPacketsPerSecond: 0.11043260952256302\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3346\nsuccessfulRxPacketsPerSecond: 0.3885591816534625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:12:04][352923541848823][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:12:05][352923541848823][1892 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.779/300.779/300.779/0.000 ms\n [2025-09-06 15:12:05][352923541848823][1893 ms][DEBUG] check_internet: online [2025-09-06 15:12:05][352923541848823][1893 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:12:05][352923541848823][1893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923541848823\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2711\"}'\'' -e'"" [2025-09-06 15:12:05][352923541848823][1893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:12:05][352923541848823][1893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923541848823\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2711\"}'\'' -e'"" [2025-09-06 15:12:10][352923541848823][6547 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad1427d8-d32e-4e6f-a660-47e70b36cb60","id":"QR_ad1427d8-d32e-4e6f-a660-47e70b36cb60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:12:10][352923541848823][6704 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-06 15:12:10][352923541848823][6704 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-06 15:12:10][352923541848823][6704 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:12:13][352923541848823][1 ms][INFO] === Request start === [2025-09-06 15:12:13][352923541848823][1 ms][DEBUG] START check_scloud [2025-09-06 15:12:13][352923541848823][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:12:13][352923541848823][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 14593 22065 24716564 206124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:12:13][352923541848823][260 ms][DEBUG] targetPkg: running [2025-09-06 15:12:13][352923541848823][261 ms][DEBUG] END check_scloud in 259 ms [2025-09-06 15:12:13][352923541848823][261 ms][DEBUG] START check_boot_completed [2025-09-06 15:12:13][352923541848823][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:12:13][352923541848823][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:12:13][352923541848823][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:12:13][352923541848823][401 ms][DEBUG] SU: done in 93 ms; out [2025-09-06 15:12:13][352923541848823][401 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 15:12:13][352923541848823][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:12:13][352923541848823][542 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3676\nsuccessfulTxPacketsPerSecond: 0.4417304380902521\nretriedTxPackets: 857\nretriedTxPacketsPerSecond: 0.11043260952256302\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3346\nsuccessfulRxPacketsPerSecond: 0.3885591816534625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:12:13][352923541848823][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:12:13][352923541848823][963 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.422/264.422/264.422/0.000 ms\n [2025-09-06 15:12:13][352923541848823][963 ms][DEBUG] check_internet: online [2025-09-06 15:12:13][352923541848823][963 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:12:13][352923541848823][964 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923541848823\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6987\"}'\'' -e'"" [2025-09-06 15:12:13][352923541848823][964 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:12:13][352923541848823][964 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923541848823\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6987\"}'\'' -e'"" [2025-09-06 15:12:18][352923541848823][5899 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72a60881-ff0f-4cb8-a513-36d230f9d04b","id":"QR_72a60881-ff0f-4cb8-a513-36d230f9d04b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:12:19][352923541848823][6056 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-06 15:12:19][352923541848823][6056 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-06 15:12:19][352923541848823][6056 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:12:23][352060480926185][0 ms][INFO] === Request start === [2025-09-06 15:12:23][352060480926185][1 ms][DEBUG] START check_scloud [2025-09-06 15:12:23][352060480926185][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:12:23][352060480926185][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 14593 22065 24879516 203580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:12:23][352060480926185][316 ms][DEBUG] targetPkg: running [2025-09-06 15:12:23][352060480926185][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 15:12:23][352060480926185][316 ms][DEBUG] START check_boot_completed [2025-09-06 15:12:23][352060480926185][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:12:23][352060480926185][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:12:23][352060480926185][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:12:23][352060480926185][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:12:23][352060480926185][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:12:23][352060480926185][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:12:23][352060480926185][566 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3676\nsuccessfulTxPacketsPerSecond: 0.4417304380902521\nretriedTxPackets: 857\nretriedTxPacketsPerSecond: 0.11043260952256302\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3346\nsuccessfulRxPacketsPerSecond: 0.3885591816534625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:12:23][352060480926185][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:12:24][352060480926185][1018 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=307 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 307.946/307.946/307.946/0.000 ms\n [2025-09-06 15:12:24][352060480926185][1019 ms][DEBUG] check_internet: online [2025-09-06 15:12:24][352060480926185][1019 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:12:24][352060480926185][1019 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480926185\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8596\"}'\'' -e'"" [2025-09-06 15:12:24][352060480926185][1019 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:12:24][352060480926185][1019 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480926185\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8596\"}'\'' -e'"" [2025-09-06 15:12:27][352060480926185][4424 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b376159-9b23-489e-afe5-b733eb822371","id":"QR_1b376159-9b23-489e-afe5-b733eb822371","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:12:27][352060480926185][4580 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-06 15:12:27][352060480926185][4580 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-06 15:12:27][352060480926185][4580 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:12:30][352060480926185][0 ms][INFO] === Request start === [2025-09-06 15:12:30][352060480926185][1 ms][DEBUG] START check_scloud [2025-09-06 15:12:30][352060480926185][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:12:30][352060480926185][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 14593 22065 24994436 194424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:12:30][352060480926185][258 ms][DEBUG] targetPkg: running [2025-09-06 15:12:30][352060480926185][258 ms][DEBUG] END check_scloud in 258 ms [2025-09-06 15:12:30][352060480926185][258 ms][DEBUG] START check_boot_completed [2025-09-06 15:12:30][352060480926185][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:12:30][352060480926185][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:12:30][352060480926185][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:12:30][352060480926185][368 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:12:30][352060480926185][368 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:12:30][352060480926185][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:12:30][352060480926185][508 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3676\nsuccessfulTxPacketsPerSecond: 0.4417304380902521\nretriedTxPackets: 857\nretriedTxPacketsPerSecond: 0.11043260952256302\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3346\nsuccessfulRxPacketsPerSecond: 0.3885591816534625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:12:30][352060480926185][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:12:31][352060480926185][867 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.803/248.803/248.803/0.000 ms\n [2025-09-06 15:12:31][352060480926185][867 ms][DEBUG] check_internet: online [2025-09-06 15:12:31][352060480926185][867 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:12:31][352060480926185][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480926185\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1886\"}'\'' -e'"" [2025-09-06 15:12:31][352060480926185][867 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:12:31][352060480926185][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480926185\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1886\"}'\'' -e'"" [2025-09-06 15:12:35][352060480926185][5616 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c09b364-4c98-4294-bfe3-6f6ab3fe45c3","id":"QR_9c09b364-4c98-4294-bfe3-6f6ab3fe45c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:12:36][352060480926185][5772 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-06 15:12:36][352060480926185][5772 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 15:12:36][352060480926185][5773 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:13:03][352949520466212][0 ms][INFO] === Request start === [2025-09-06 15:13:03][352949520466212][1 ms][DEBUG] START check_scloud [2025-09-06 15:13:03][352949520466212][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:13:03][352949520466212][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 14593 22065 25087776 188540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:13:03][352949520466212][315 ms][DEBUG] targetPkg: running [2025-09-06 15:13:03][352949520466212][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 15:13:03][352949520466212][315 ms][DEBUG] START check_boot_completed [2025-09-06 15:13:03][352949520466212][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:13:03][352949520466212][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:13:03][352949520466212][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:13:03][352949520466212][394 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 15:13:03][352949520466212][395 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 15:13:03][352949520466212][395 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:13:03][352949520466212][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520466212\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6492\"}'\'' -e'"" [2025-09-06 15:13:03][352949520466212][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:13:03][352949520466212][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520466212\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6492\"}'\'' -e'"" [2025-09-06 15:13:07][352949520466212][4471 ms][DEBUG] proc_open done in 4076 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 15:13:07][352949520466212][4471 ms][DEBUG] END runCmdUntilRes#1 in 4076 ms [2025-09-06 15:13:07][352949520466212][4471 ms][WARN] Detected error: Process with pid 14593 either refused to load frida-agent, or terminated during injectionProcess with pid 14593 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 15:13:07][352949520466212][4471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 15:13:08][352949520466212][4767 ms][DEBUG] SU: done in 296 ms; outsystem 22396 22065 12715080 211628 ep_poll 0 S system_server\n [2025-09-06 15:13:08][352949520466212][4767 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 15:13:08][352949520466212][4908 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 15:13:08][352949520466212][4908 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 15:13:08][352949520466212][4908 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 15:13:08][352949520466212][5033 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 15:13:08][352949520466212][5033 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 15:13:08][352949520466212][5205 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 15:13:10][352949520466212][7220 ms][DEBUG] START check_boot_completed [2025-09-06 15:13:10][352949520466212][7220 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:13:10][352949520466212][7267 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:13:10][352949520466212][7267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:13:10][352949520466212][7329 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:13:10][352949520466212][7329 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 15:13:13][352949520466212][10344 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 15:13:13][352949520466212][10344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520466212\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6492\"}'\'' -e'"" [2025-09-06 15:13:17][352949520466212][14234 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7f802d8-99f9-4a67-9d30-130aee64d0d7","id":"QR_b7f802d8-99f9-4a67-9d30-130aee64d0d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:13:17][352949520466212][14390 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-09-06 15:13:17][352949520466212][14390 ms][DEBUG] END runCmdUntilRes#2 in 4046 ms [2025-09-06 15:13:17][352949520466212][14390 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:13:20][352949520466212][0 ms][INFO] === Request start === [2025-09-06 15:13:20][352949520466212][1 ms][DEBUG] START check_scloud [2025-09-06 15:13:20][352949520466212][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:13:20][352949520466212][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 16947 22065 23861088 124140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:13:20][352949520466212][285 ms][DEBUG] targetPkg: running [2025-09-06 15:13:20][352949520466212][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 15:13:20][352949520466212][285 ms][DEBUG] START check_boot_completed [2025-09-06 15:13:20][352949520466212][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:13:20][352949520466212][332 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:13:20][352949520466212][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:13:20][352949520466212][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:13:20][352949520466212][379 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:13:20][352949520466212][379 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:13:20][352949520466212][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520466212\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1976\"}'\'' -e'"" [2025-09-06 15:13:20][352949520466212][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:13:20][352949520466212][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520466212\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1976\"}'\'' -e'"" [2025-09-06 15:13:25][352949520466212][5315 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21b72f31-77c9-4560-9f40-8882530f7373","id":"QR_21b72f31-77c9-4560-9f40-8882530f7373","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:13:25][352949520466212][5471 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-06 15:13:25][352949520466212][5471 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-06 15:13:25][352949520466212][5471 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:14:03][357688956877386][0 ms][INFO] === Request start === [2025-09-06 15:14:03][357688956877386][1 ms][DEBUG] START check_scloud [2025-09-06 15:14:03][357688956877386][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:14:03][357688956877386][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 16947 22065 23908028 137400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:14:03][357688956877386][314 ms][DEBUG] targetPkg: running [2025-09-06 15:14:03][357688956877386][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 15:14:03][357688956877386][314 ms][DEBUG] START check_boot_completed [2025-09-06 15:14:03][357688956877386][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:14:03][357688956877386][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:14:03][357688956877386][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:14:03][357688956877386][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:14:03][357688956877386][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 15:14:03][357688956877386][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:14:04][357688956877386][502 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3676\nsuccessfulTxPacketsPerSecond: 0.4417304380902521\nretriedTxPackets: 857\nretriedTxPacketsPerSecond: 0.11043260952256302\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3346\nsuccessfulRxPacketsPerSecond: 0.3885591816534625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:14:04][357688956877386][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:14:04][357688956877386][955 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=343 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 343.510/343.510/343.510/0.000 ms\n [2025-09-06 15:14:04][357688956877386][955 ms][DEBUG] check_internet: online [2025-09-06 15:14:04][357688956877386][955 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:14:04][357688956877386][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357688956877386\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7639\"}'\'' -e'"" [2025-09-06 15:14:04][357688956877386][955 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:14:04][357688956877386][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357688956877386\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7639\"}'\'' -e'"" [2025-09-06 15:14:08][357688956877386][4563 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f5e98b16-3578-426c-b5bc-a5150d124e1d","id":"QR_f5e98b16-3578-426c-b5bc-a5150d124e1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:14:08][357688956877386][4719 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-06 15:14:08][357688956877386][4719 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-06 15:14:08][357688956877386][4719 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:14:10][357688956877386][0 ms][INFO] === Request start === [2025-09-06 15:14:10][357688956877386][1 ms][DEBUG] START check_scloud [2025-09-06 15:14:10][357688956877386][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:14:10][357688956877386][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 16947 22065 24046404 149072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:14:10][357688956877386][322 ms][DEBUG] targetPkg: running [2025-09-06 15:14:10][357688956877386][322 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 15:14:10][357688956877386][322 ms][DEBUG] START check_boot_completed [2025-09-06 15:14:10][357688956877386][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:14:10][357688956877386][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:14:10][357688956877386][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:14:10][357688956877386][430 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:14:10][357688956877386][430 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 15:14:10][357688956877386][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:14:11][357688956877386][542 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3676\nsuccessfulTxPacketsPerSecond: 0.4417304380902521\nretriedTxPackets: 857\nretriedTxPacketsPerSecond: 0.11043260952256302\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3346\nsuccessfulRxPacketsPerSecond: 0.3885591816534625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:14:11][357688956877386][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:14:11][357688956877386][977 ms][DEBUG] SU: done in 435 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.145/306.145/306.145/0.000 ms\n [2025-09-06 15:14:11][357688956877386][977 ms][DEBUG] check_internet: online [2025-09-06 15:14:11][357688956877386][977 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:14:11][357688956877386][977 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357688956877386\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3864\"}'\'' -e'"" [2025-09-06 15:14:11][357688956877386][978 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:14:11][357688956877386][978 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357688956877386\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3864\"}'\'' -e'"" [2025-09-06 15:14:16][357688956877386][5617 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3aa1a487-9d3b-4bd6-8fa2-85dd66a63d75","id":"QR_3aa1a487-9d3b-4bd6-8fa2-85dd66a63d75","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:14:16][357688956877386][5773 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 15:14:16][357688956877386][5773 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-06 15:14:16][357688956877386][5773 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:16:03][350756486820080][1 ms][INFO] === Request start === [2025-09-06 15:16:03][350756486820080][1 ms][DEBUG] START check_scloud [2025-09-06 15:16:03][350756486820080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:16:03][350756486820080][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 16947 22065 24142584 160292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:16:03][350756486820080][313 ms][DEBUG] targetPkg: running [2025-09-06 15:16:03][350756486820080][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 15:16:03][350756486820080][313 ms][DEBUG] START check_boot_completed [2025-09-06 15:16:03][350756486820080][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:16:03][350756486820080][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:16:03][350756486820080][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:16:03][350756486820080][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:16:03][350756486820080][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:16:03][350756486820080][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:16:03][350756486820080][515 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4004\nsuccessfulTxPacketsPerSecond: 0.38146410930880226\nretriedTxPackets: 949\nretriedTxPacketsPerSecond: 0.1362367840070937\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3639\nsuccessfulRxPacketsPerSecond: 0.32696942419119335\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:16:03][350756486820080][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:16:04][350756486820080][875 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.739/259.739/259.739/0.000 ms\n [2025-09-06 15:16:04][350756486820080][875 ms][DEBUG] check_internet: online [2025-09-06 15:16:04][350756486820080][875 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:16:04][350756486820080][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756486820080\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8587\"}'\'' -e'"" [2025-09-06 15:16:04][350756486820080][875 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:16:04][350756486820080][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756486820080\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8587\"}'\'' -e'"" [2025-09-06 15:16:08][350756486820080][5639 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_685a3804-d563-401f-a6ac-abd80fa1de91","id":"QR_685a3804-d563-401f-a6ac-abd80fa1de91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:16:09][350756486820080][5795 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-06 15:16:09][350756486820080][5795 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-06 15:16:09][350756486820080][5795 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:16:11][350756486820080][0 ms][INFO] === Request start === [2025-09-06 15:16:11][350756486820080][1 ms][DEBUG] START check_scloud [2025-09-06 15:16:11][350756486820080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:16:11][350756486820080][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 16947 22065 24288128 171284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:16:11][350756486820080][292 ms][DEBUG] targetPkg: running [2025-09-06 15:16:11][350756486820080][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 15:16:11][350756486820080][292 ms][DEBUG] START check_boot_completed [2025-09-06 15:16:11][350756486820080][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:16:11][350756486820080][338 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:16:11][350756486820080][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:16:11][350756486820080][401 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:16:11][350756486820080][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:16:11][350756486820080][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:16:11][350756486820080][526 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4004\nsuccessfulTxPacketsPerSecond: 0.38146410930880226\nretriedTxPackets: 949\nretriedTxPacketsPerSecond: 0.1362367840070937\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3639\nsuccessfulRxPacketsPerSecond: 0.32696942419119335\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:16:11][350756486820080][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:16:12][350756486820080][947 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.161/286.161/286.161/0.000 ms\n [2025-09-06 15:16:12][350756486820080][948 ms][DEBUG] check_internet: online [2025-09-06 15:16:12][350756486820080][948 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:16:12][350756486820080][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756486820080\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7116\"}'\'' -e'"" [2025-09-06 15:16:12][350756486820080][948 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:16:12][350756486820080][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756486820080\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7116\"}'\'' -e'"" [2025-09-06 15:16:17][350756486820080][6009 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6100af51-2041-4336-bdc9-9c3edaa5115e","id":"QR_6100af51-2041-4336-bdc9-9c3edaa5115e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:16:17][350756486820080][6165 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 15:16:17][350756486820080][6165 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 15:16:17][350756486820080][6165 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:16:21][353809895287792][0 ms][INFO] === Request start === [2025-09-06 15:16:21][353809895287792][1 ms][DEBUG] START check_scloud [2025-09-06 15:16:21][353809895287792][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:16:22][353809895287792][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 16947 22065 24430728 183192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:16:22][353809895287792][294 ms][DEBUG] targetPkg: running [2025-09-06 15:16:22][353809895287792][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 15:16:22][353809895287792][295 ms][DEBUG] START check_boot_completed [2025-09-06 15:16:22][353809895287792][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:16:22][353809895287792][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:16:22][353809895287792][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:16:22][353809895287792][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:16:22][353809895287792][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:16:22][353809895287792][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:16:22][353809895287792][513 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4004\nsuccessfulTxPacketsPerSecond: 0.38146410930880226\nretriedTxPackets: 949\nretriedTxPacketsPerSecond: 0.1362367840070937\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3639\nsuccessfulRxPacketsPerSecond: 0.32696942419119335\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:16:22][353809895287792][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:16:22][353809895287792][997 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=343 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 343.040/343.040/343.040/0.000 ms\n [2025-09-06 15:16:22][353809895287792][997 ms][DEBUG] check_internet: online [2025-09-06 15:16:22][353809895287792][997 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:16:22][353809895287792][997 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809895287792\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4402\"}'\'' -e'"" [2025-09-06 15:16:22][353809895287792][997 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:16:22][353809895287792][998 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809895287792\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4402\"}'\'' -e'"" [2025-09-06 15:16:26][353809895287792][4496 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d68b35bf-ad7e-45a8-8e52-703eb65baabf","id":"QR_d68b35bf-ad7e-45a8-8e52-703eb65baabf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:16:26][353809895287792][4652 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-06 15:16:26][353809895287792][4652 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-06 15:16:26][353809895287792][4652 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:16:29][353809895287792][0 ms][INFO] === Request start === [2025-09-06 15:16:29][353809895287792][1 ms][DEBUG] START check_scloud [2025-09-06 15:16:29][353809895287792][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:16:30][353809895287792][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 16947 22065 24552812 194212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:16:30][353809895287792][324 ms][DEBUG] targetPkg: running [2025-09-06 15:16:30][353809895287792][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-06 15:16:30][353809895287792][324 ms][DEBUG] START check_boot_completed [2025-09-06 15:16:30][353809895287792][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:16:30][353809895287792][371 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:16:30][353809895287792][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:16:30][353809895287792][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:16:30][353809895287792][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:16:30][353809895287792][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:16:30][353809895287792][574 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4004\nsuccessfulTxPacketsPerSecond: 0.38146410930880226\nretriedTxPackets: 949\nretriedTxPacketsPerSecond: 0.1362367840070937\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3639\nsuccessfulRxPacketsPerSecond: 0.32696942419119335\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:16:30][353809895287792][574 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:16:30][353809895287792][1011 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=340 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 340.569/340.569/340.569/0.000 ms\n [2025-09-06 15:16:30][353809895287792][1011 ms][DEBUG] check_internet: online [2025-09-06 15:16:30][353809895287792][1011 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:16:30][353809895287792][1011 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809895287792\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5442\"}'\'' -e'"" [2025-09-06 15:16:30][353809895287792][1012 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:16:30][353809895287792][1012 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809895287792\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5442\"}'\'' -e'"" [2025-09-06 15:16:35][353809895287792][5572 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_704855f9-291b-4796-a9d3-9256a6d666df","id":"QR_704855f9-291b-4796-a9d3-9256a6d666df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:16:35][353809895287792][5729 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-06 15:16:35][353809895287792][5729 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-09-06 15:16:35][353809895287792][5729 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:17:03][350013906981922][0 ms][INFO] === Request start === [2025-09-06 15:17:03][350013906981922][1 ms][DEBUG] START check_scloud [2025-09-06 15:17:03][350013906981922][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:17:03][350013906981922][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 16947 22065 24646024 206272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:17:03][350013906981922][316 ms][DEBUG] targetPkg: running [2025-09-06 15:17:03][350013906981922][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 15:17:03][350013906981922][316 ms][DEBUG] START check_boot_completed [2025-09-06 15:17:03][350013906981922][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:17:03][350013906981922][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:17:03][350013906981922][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:17:03][350013906981922][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:17:03][350013906981922][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:17:03][350013906981922][410 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:17:03][350013906981922][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013906981922\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5143\"}'\'' -e'"" [2025-09-06 15:17:03][350013906981922][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:17:03][350013906981922][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013906981922\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5143\"}'\'' -e'"" [2025-09-06 15:17:07][350013906981922][3846 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3df165f8-2733-4257-b34b-832cf14a2ba8","id":"QR_3df165f8-2733-4257-b34b-832cf14a2ba8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:17:07][350013906981922][4002 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-06 15:17:07][350013906981922][4002 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-09-06 15:17:07][350013906981922][4002 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:17:09][350013906981922][0 ms][INFO] === Request start === [2025-09-06 15:17:09][350013906981922][1 ms][DEBUG] START check_scloud [2025-09-06 15:17:09][350013906981922][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:17:09][350013906981922][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 16947 22065 24804012 217032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:17:09][350013906981922][314 ms][DEBUG] targetPkg: running [2025-09-06 15:17:09][350013906981922][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 15:17:09][350013906981922][314 ms][DEBUG] START check_boot_completed [2025-09-06 15:17:09][350013906981922][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:17:09][350013906981922][377 ms][DEBUG] ADB: done in 62 ms; out [2025-09-06 15:17:09][350013906981922][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:17:10][350013906981922][439 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:17:10][350013906981922][439 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 15:17:10][350013906981922][439 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:17:10][350013906981922][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013906981922\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7582\"}'\'' -e'"" [2025-09-06 15:17:10][350013906981922][439 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:17:10][350013906981922][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013906981922\",\"model\":\"SM-A336B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7582\"}'\'' -e'"" [2025-09-06 15:17:14][350013906981922][5297 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbcf8061-acfd-42b9-b24d-a23c198e2ac9","id":"QR_dbcf8061-acfd-42b9-b24d-a23c198e2ac9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:17:15][350013906981922][5453 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 15:17:15][350013906981922][5453 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 15:17:15][350013906981922][5453 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:17:19][351877472321625][0 ms][INFO] === Request start === [2025-09-06 15:17:19][351877472321625][1 ms][DEBUG] START check_scloud [2025-09-06 15:17:19][351877472321625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:17:19][351877472321625][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 16947 22065 24956724 229024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:17:19][351877472321625][265 ms][DEBUG] targetPkg: running [2025-09-06 15:17:19][351877472321625][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-06 15:17:19][351877472321625][265 ms][DEBUG] START check_boot_completed [2025-09-06 15:17:19][351877472321625][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:17:19][351877472321625][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:17:19][351877472321625][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:17:19][351877472321625][374 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:17:19][351877472321625][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:17:19][351877472321625][374 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:17:19][351877472321625][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472321625\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9412\"}'\'' -e'"" [2025-09-06 15:17:19][351877472321625][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:17:19][351877472321625][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472321625\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9412\"}'\'' -e'"" [2025-09-06 15:17:24][351877472321625][5107 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c52572cd-fb73-49ef-9d8f-016e48ae8913","id":"QR_c52572cd-fb73-49ef-9d8f-016e48ae8913","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:17:24][351877472321625][5264 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 15:17:24][351877472321625][5264 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 15:17:24][351877472321625][5264 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:17:27][351877472321625][0 ms][INFO] === Request start === [2025-09-06 15:17:27][351877472321625][1 ms][DEBUG] START check_scloud [2025-09-06 15:17:27][351877472321625][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:17:27][351877472321625][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 16947 22065 25074200 240996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:17:27][351877472321625][304 ms][DEBUG] targetPkg: running [2025-09-06 15:17:27][351877472321625][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 15:17:27][351877472321625][304 ms][DEBUG] START check_boot_completed [2025-09-06 15:17:27][351877472321625][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:17:27][351877472321625][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:17:27][351877472321625][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:17:27][351877472321625][383 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 15:17:27][351877472321625][383 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 15:17:27][351877472321625][383 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:17:27][351877472321625][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472321625\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4167\"}'\'' -e'"" [2025-09-06 15:17:27][351877472321625][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:17:27][351877472321625][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472321625\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4167\"}'\'' -e'"" [2025-09-06 15:17:31][351877472321625][4350 ms][DEBUG] proc_open done in 3967 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 15:17:31][351877472321625][4350 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-09-06 15:17:31][351877472321625][4350 ms][WARN] Detected error: Process with pid 16947 either refused to load frida-agent, or terminated during injectionProcess with pid 16947 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 15:17:31][351877472321625][4350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 15:17:31][351877472321625][4616 ms][DEBUG] SU: done in 265 ms; outsystem 22396 22065 12624168 195468 ep_poll 0 S system_server\n [2025-09-06 15:17:31][351877472321625][4616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 15:17:31][351877472321625][4756 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 15:17:31][351877472321625][4756 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 15:17:31][351877472321625][4756 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 15:17:31][351877472321625][4881 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 15:17:31][351877472321625][4881 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 15:17:32][351877472321625][5037 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 15:17:34][351877472321625][7052 ms][DEBUG] START check_boot_completed [2025-09-06 15:17:34][351877472321625][7052 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:17:34][351877472321625][7099 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:17:34][351877472321625][7099 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:17:34][351877472321625][7146 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:17:34][351877472321625][7146 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:17:37][351877472321625][10161 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 15:17:37][351877472321625][10161 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472321625\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4167\"}'\'' -e'"" [2025-09-06 15:17:42][351877472321625][14988 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd45d763-e5ad-4a49-ac29-ce974e47f661","id":"QR_cd45d763-e5ad-4a49-ac29-ce974e47f661","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:17:42][351877472321625][15144 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-09-06 15:17:42][351877472321625][15144 ms][DEBUG] END runCmdUntilRes#2 in 4983 ms [2025-09-06 15:17:42][351877472321625][15144 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:20:04][350498552490197][1 ms][INFO] === Request start === [2025-09-06 15:20:04][350498552490197][1 ms][DEBUG] START check_scloud [2025-09-06 15:20:04][350498552490197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:20:04][350498552490197][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 18341 22065 23672332 127436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:20:04][350498552490197][289 ms][DEBUG] targetPkg: running [2025-09-06 15:20:04][350498552490197][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-06 15:20:04][350498552490197][289 ms][DEBUG] START check_boot_completed [2025-09-06 15:20:04][350498552490197][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:20:04][350498552490197][320 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:20:04][350498552490197][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:20:04][350498552490197][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:20:04][350498552490197][367 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 15:20:04][350498552490197][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:20:04][350498552490197][476 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4216\nsuccessfulTxPacketsPerSecond: 0.8018518238346672\nretriedTxPackets: 1006\nretriedTxPacketsPerSecond: 0.21559223565366054\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3814\nsuccessfulRxPacketsPerSecond: 0.6619059866559753\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:20:04][350498552490197][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:20:05][350498552490197][1882 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.746/300.746/300.746/0.000 ms\n [2025-09-06 15:20:05][350498552490197][1882 ms][DEBUG] check_internet: online [2025-09-06 15:20:05][350498552490197][1882 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:20:05][350498552490197][1883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498552490197\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1702\"}'\'' -e'"" [2025-09-06 15:20:05][350498552490197][1883 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:20:05][350498552490197][1883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498552490197\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1702\"}'\'' -e'"" [2025-09-06 15:20:09][350498552490197][5834 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9823e0d-45b0-412a-9af2-fb988052ae04","id":"QR_d9823e0d-45b0-412a-9af2-fb988052ae04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:20:10][350498552490197][5990 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-06 15:20:10][350498552490197][5991 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-06 15:20:10][350498552490197][5991 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:20:12][350498552490197][0 ms][INFO] === Request start === [2025-09-06 15:20:12][350498552490197][1 ms][DEBUG] START check_scloud [2025-09-06 15:20:12][350498552490197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:20:12][350498552490197][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 18341 22065 23810516 137860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:20:12][350498552490197][304 ms][DEBUG] targetPkg: running [2025-09-06 15:20:12][350498552490197][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 15:20:12][350498552490197][304 ms][DEBUG] START check_boot_completed [2025-09-06 15:20:12][350498552490197][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:20:12][350498552490197][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:20:12][350498552490197][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:20:12][350498552490197][413 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:20:12][350498552490197][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:20:12][350498552490197][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:20:12][350498552490197][538 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4216\nsuccessfulTxPacketsPerSecond: 0.8018518238346672\nretriedTxPackets: 1006\nretriedTxPacketsPerSecond: 0.21559223565366054\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3814\nsuccessfulRxPacketsPerSecond: 0.6619059866559753\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:20:12][350498552490197][539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:20:13][350498552490197][913 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.062/267.062/267.062/0.000 ms\n [2025-09-06 15:20:13][350498552490197][913 ms][DEBUG] check_internet: online [2025-09-06 15:20:13][350498552490197][914 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:20:13][350498552490197][914 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498552490197\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9153\"}'\'' -e'"" [2025-09-06 15:20:13][350498552490197][914 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:20:13][350498552490197][914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498552490197\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9153\"}'\'' -e'"" [2025-09-06 15:20:18][350498552490197][5959 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bed18c1b-bbd5-4522-8623-dce26606a236","id":"QR_bed18c1b-bbd5-4522-8623-dce26606a236","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:20:18][350498552490197][6115 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-06 15:20:18][350498552490197][6115 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-06 15:20:18][350498552490197][6115 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:20:22][356921441945380][0 ms][INFO] === Request start === [2025-09-06 15:20:22][356921441945380][1 ms][DEBUG] START check_scloud [2025-09-06 15:20:22][356921441945380][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:20:23][356921441945380][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 18341 22065 23965468 150124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:20:23][356921441945380][320 ms][DEBUG] targetPkg: running [2025-09-06 15:20:23][356921441945380][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 15:20:23][356921441945380][320 ms][DEBUG] START check_boot_completed [2025-09-06 15:20:23][356921441945380][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:20:23][356921441945380][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:20:23][356921441945380][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:20:23][356921441945380][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:20:23][356921441945380][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:20:23][356921441945380][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:20:23][356921441945380][523 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4216\nsuccessfulTxPacketsPerSecond: 0.8018518238346672\nretriedTxPackets: 1006\nretriedTxPacketsPerSecond: 0.21559223565366054\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3814\nsuccessfulRxPacketsPerSecond: 0.6619059866559753\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:20:23][356921441945380][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:20:23][356921441945380][960 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=295 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 295.837/295.837/295.837/0.000 ms\n [2025-09-06 15:20:23][356921441945380][961 ms][DEBUG] check_internet: online [2025-09-06 15:20:23][356921441945380][961 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:20:23][356921441945380][961 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356921441945380\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4532\"}'\'' -e'"" [2025-09-06 15:20:23][356921441945380][961 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:20:23][356921441945380][961 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356921441945380\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4532\"}'\'' -e'"" [2025-09-06 15:20:27][356921441945380][4475 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_957ea59f-7cbb-4b88-8ddf-9bc0b3757748","id":"QR_957ea59f-7cbb-4b88-8ddf-9bc0b3757748","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:20:27][356921441945380][4631 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=3343 [2025-09-06 15:20:27][356921441945380][4631 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-06 15:20:27][356921441945380][4631 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:20:29][356921441945380][0 ms][INFO] === Request start === [2025-09-06 15:20:29][356921441945380][1 ms][DEBUG] START check_scloud [2025-09-06 15:20:29][356921441945380][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:20:30][356921441945380][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 18341 22065 24090944 161232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:20:30][356921441945380][318 ms][DEBUG] targetPkg: running [2025-09-06 15:20:30][356921441945380][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 15:20:30][356921441945380][318 ms][DEBUG] START check_boot_completed [2025-09-06 15:20:30][356921441945380][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:20:30][356921441945380][349 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:20:30][356921441945380][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:20:30][356921441945380][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:20:30][356921441945380][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 15:20:30][356921441945380][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:20:30][356921441945380][521 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4216\nsuccessfulTxPacketsPerSecond: 0.8018518238346672\nretriedTxPackets: 1006\nretriedTxPacketsPerSecond: 0.21559223565366054\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3814\nsuccessfulRxPacketsPerSecond: 0.6619059866559753\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:20:30][356921441945380][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:20:30][356921441945380][990 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=324 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 324.620/324.620/324.620/0.000 ms\n [2025-09-06 15:20:30][356921441945380][990 ms][DEBUG] check_internet: online [2025-09-06 15:20:30][356921441945380][990 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:20:30][356921441945380][990 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356921441945380\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4034\"}'\'' -e'"" [2025-09-06 15:20:30][356921441945380][990 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:20:30][356921441945380][990 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356921441945380\",\"model\":\"SM-M146B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4034\"}'\'' -e'"" [2025-09-06 15:20:35][356921441945380][5629 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_420d1bf4-65a6-40e0-9348-ef720c0ffb45","id":"QR_420d1bf4-65a6-40e0-9348-ef720c0ffb45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:20:35][356921441945380][5785 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 15:20:35][356921441945380][5785 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-06 15:20:35][356921441945380][5785 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:22:03][358141438229254][0 ms][INFO] === Request start === [2025-09-06 15:22:03][358141438229254][1 ms][DEBUG] START check_scloud [2025-09-06 15:22:03][358141438229254][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:22:04][358141438229254][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18341 22065 24219100 173120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:22:04][358141438229254][313 ms][DEBUG] targetPkg: running [2025-09-06 15:22:04][358141438229254][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 15:22:04][358141438229254][314 ms][DEBUG] START check_boot_completed [2025-09-06 15:22:04][358141438229254][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:22:04][358141438229254][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:22:04][358141438229254][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:22:04][358141438229254][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:22:04][358141438229254][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:22:04][358141438229254][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:22:04][358141438229254][532 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4216\nsuccessfulTxPacketsPerSecond: 0.8018518238346672\nretriedTxPackets: 1006\nretriedTxPacketsPerSecond: 0.21559223565366054\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3814\nsuccessfulRxPacketsPerSecond: 0.6619059866559753\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:22:04][358141438229254][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:22:04][358141438229254][907 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.244/273.244/273.244/0.000 ms\n [2025-09-06 15:22:04][358141438229254][907 ms][DEBUG] check_internet: online [2025-09-06 15:22:04][358141438229254][907 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:22:04][358141438229254][907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141438229254\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1183\"}'\'' -e'"" [2025-09-06 15:22:04][358141438229254][907 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:22:04][358141438229254][907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141438229254\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1183\"}'\'' -e'"" [2025-09-06 15:22:09][358141438229254][5562 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5e7d644-a5b3-4d46-8999-556cfc8bf5a1","id":"QR_d5e7d644-a5b3-4d46-8999-556cfc8bf5a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:22:09][358141438229254][5718 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-06 15:22:09][358141438229254][5718 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-06 15:22:09][358141438229254][5718 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:22:11][358141438229254][1 ms][INFO] === Request start === [2025-09-06 15:22:11][358141438229254][1 ms][DEBUG] START check_scloud [2025-09-06 15:22:11][358141438229254][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:22:12][358141438229254][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18341 22065 24353508 184020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:22:12][358141438229254][306 ms][DEBUG] targetPkg: running [2025-09-06 15:22:12][358141438229254][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 15:22:12][358141438229254][307 ms][DEBUG] START check_boot_completed [2025-09-06 15:22:12][358141438229254][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:22:12][358141438229254][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:22:12][358141438229254][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:22:12][358141438229254][415 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:22:12][358141438229254][415 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 15:22:12][358141438229254][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:22:12][358141438229254][524 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4216\nsuccessfulTxPacketsPerSecond: 0.8018518238346672\nretriedTxPackets: 1006\nretriedTxPacketsPerSecond: 0.21559223565366054\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3814\nsuccessfulRxPacketsPerSecond: 0.6619059866559753\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:22:12][358141438229254][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:22:12][358141438229254][977 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=365 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 365.303/365.303/365.303/0.000 ms\n [2025-09-06 15:22:12][358141438229254][977 ms][DEBUG] check_internet: online [2025-09-06 15:22:12][358141438229254][977 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:22:12][358141438229254][977 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141438229254\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4055\"}'\'' -e'"" [2025-09-06 15:22:12][358141438229254][977 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:22:12][358141438229254][977 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141438229254\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4055\"}'\'' -e'"" [2025-09-06 15:22:17][358141438229254][5929 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5698c12-01ab-4146-b060-6cecf4b37ece","id":"QR_e5698c12-01ab-4146-b060-6cecf4b37ece","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:22:17][358141438229254][6085 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 15:22:17][358141438229254][6085 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 15:22:17][358141438229254][6085 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:25:04][354255812452037][1 ms][INFO] === Request start === [2025-09-06 15:25:04][354255812452037][1 ms][DEBUG] START check_scloud [2025-09-06 15:25:04][354255812452037][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:25:04][354255812452037][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 18341 22065 24515520 196384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:25:04][354255812452037][290 ms][DEBUG] targetPkg: running [2025-09-06 15:25:04][354255812452037][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-06 15:25:04][354255812452037][290 ms][DEBUG] START check_boot_completed [2025-09-06 15:25:04][354255812452037][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:25:04][354255812452037][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:25:04][354255812452037][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:25:04][354255812452037][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:25:04][354255812452037][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:25:04][354255812452037][384 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:25:04][354255812452037][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812452037\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1182\"}'\'' -e'"" [2025-09-06 15:25:04][354255812452037][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:25:04][354255812452037][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812452037\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1182\"}'\'' -e'"" [2025-09-06 15:25:08][354255812452037][4961 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2867d992-a54e-4a9a-9e6b-4b95b39fd62c","id":"QR_2867d992-a54e-4a9a-9e6b-4b95b39fd62c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:25:09][354255812452037][5117 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-06 15:25:09][354255812452037][5117 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-06 15:25:09][354255812452037][5117 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:25:11][354255812452037][0 ms][INFO] === Request start === [2025-09-06 15:25:11][354255812452037][1 ms][DEBUG] START check_scloud [2025-09-06 15:25:11][354255812452037][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:25:11][354255812452037][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 18341 22065 24642760 207264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:25:11][354255812452037][270 ms][DEBUG] targetPkg: running [2025-09-06 15:25:11][354255812452037][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-06 15:25:11][354255812452037][270 ms][DEBUG] START check_boot_completed [2025-09-06 15:25:11][354255812452037][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:25:11][354255812452037][317 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:25:11][354255812452037][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:25:11][354255812452037][364 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 15:25:11][354255812452037][365 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 15:25:11][354255812452037][365 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:25:11][354255812452037][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812452037\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5709\"}'\'' -e'"" [2025-09-06 15:25:11][354255812452037][365 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:25:11][354255812452037][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812452037\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5709\"}'\'' -e'"" [2025-09-06 15:25:16][354255812452037][5300 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f233b748-14af-4a0f-88da-c4f127ecc505","id":"QR_f233b748-14af-4a0f-88da-c4f127ecc505","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:25:16][354255812452037][5456 ms][DEBUG] proc_open done in 5091 ms; code=255; res.len=3343 [2025-09-06 15:25:16][354255812452037][5456 ms][DEBUG] END runCmdUntilRes#1 in 5091 ms [2025-09-06 15:25:16][354255812452037][5456 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:27:04][358104902638780][1 ms][INFO] === Request start === [2025-09-06 15:27:04][358104902638780][1 ms][DEBUG] START check_scloud [2025-09-06 15:27:04][358104902638780][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:27:04][358104902638780][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 18341 22065 24738184 218808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:27:04][358104902638780][262 ms][DEBUG] targetPkg: running [2025-09-06 15:27:04][358104902638780][262 ms][DEBUG] END check_scloud in 261 ms [2025-09-06 15:27:04][358104902638780][262 ms][DEBUG] START check_boot_completed [2025-09-06 15:27:04][358104902638780][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:27:04][358104902638780][309 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:27:04][358104902638780][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:27:04][358104902638780][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:27:04][358104902638780][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:27:04][358104902638780][356 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:27:04][358104902638780][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902638780\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2399\"}'\'' -e'"" [2025-09-06 15:27:04][358104902638780][356 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:27:04][358104902638780][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902638780\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2399\"}'\'' -e'"" [2025-09-06 15:27:09][358104902638780][4933 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ca7d895-de9f-4feb-9765-3d0dae65052a","id":"QR_0ca7d895-de9f-4feb-9765-3d0dae65052a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:27:09][358104902638780][5089 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-09-06 15:27:09][358104902638780][5089 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-06 15:27:09][358104902638780][5089 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:27:11][358104902638780][0 ms][INFO] === Request start === [2025-09-06 15:27:11][358104902638780][1 ms][DEBUG] START check_scloud [2025-09-06 15:27:11][358104902638780][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:27:11][358104902638780][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 18341 22065 24919568 230548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:27:11][358104902638780][309 ms][DEBUG] targetPkg: running [2025-09-06 15:27:11][358104902638780][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 15:27:11][358104902638780][309 ms][DEBUG] START check_boot_completed [2025-09-06 15:27:11][358104902638780][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:27:12][358104902638780][355 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:27:12][358104902638780][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:27:12][358104902638780][418 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 15:27:12][358104902638780][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:27:12][358104902638780][418 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:27:12][358104902638780][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902638780\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3113\"}'\'' -e'"" [2025-09-06 15:27:12][358104902638780][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:27:12][358104902638780][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902638780\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3113\"}'\'' -e'"" [2025-09-06 15:27:17][358104902638780][5432 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4af23549-1325-4285-893b-1ca15cb92471","id":"QR_4af23549-1325-4285-893b-1ca15cb92471","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:27:17][358104902638780][5588 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-09-06 15:27:17][358104902638780][5589 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-09-06 15:27:17][358104902638780][5589 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:36:04][352693791617158][1 ms][INFO] === Request start === [2025-09-06 15:36:04][352693791617158][1 ms][DEBUG] START check_scloud [2025-09-06 15:36:04][352693791617158][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:36:05][352693791617158][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 18341 22065 25013764 241816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:36:05][352693791617158][256 ms][DEBUG] targetPkg: running [2025-09-06 15:36:05][352693791617158][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-06 15:36:05][352693791617158][257 ms][DEBUG] START check_boot_completed [2025-09-06 15:36:05][352693791617158][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:36:05][352693791617158][303 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:36:05][352693791617158][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:36:05][352693791617158][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:36:05][352693791617158][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:36:05][352693791617158][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:36:05][352693791617158][459 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4515\nsuccessfulTxPacketsPerSecond: 0.0531807047108133\nretriedTxPackets: 1110\nretriedTxPacketsPerSecond: 0.046533116621961634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4062\nsuccessfulRxPacketsPerSecond: 0.02659035235540665\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:36:05][352693791617158][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:36:06][352693791617158][1897 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.382/298.382/298.382/0.000 ms\n [2025-09-06 15:36:06][352693791617158][1897 ms][DEBUG] check_internet: online [2025-09-06 15:36:06][352693791617158][1897 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:36:06][352693791617158][1898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693791617158\",\"model\":\"SM-S721W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7932\"}'\'' -e'"" [2025-09-06 15:36:06][352693791617158][1898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:36:06][352693791617158][1898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693791617158\",\"model\":\"SM-S721W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7932\"}'\'' -e'"" [2025-09-06 15:36:10][352693791617158][5724 ms][DEBUG] proc_open done in 3826 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 15:36:10][352693791617158][5724 ms][DEBUG] END runCmdUntilRes#1 in 3826 ms [2025-09-06 15:36:10][352693791617158][5724 ms][WARN] Detected error: Process with pid 18341 either refused to load frida-agent, or terminated during injectionProcess with pid 18341 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 15:36:10][352693791617158][5724 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 15:36:10][352693791617158][6021 ms][DEBUG] SU: done in 297 ms; outsystem 22396 22065 12715080 200324 ep_poll 0 S system_server\n [2025-09-06 15:36:10][352693791617158][6021 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 15:36:10][352693791617158][6161 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 15:36:10][352693791617158][6161 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 15:36:10][352693791617158][6161 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 15:36:11][352693791617158][6286 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 15:36:11][352693791617158][6286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 15:36:11][352693791617158][6442 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 15:36:13][352693791617158][8457 ms][DEBUG] START check_boot_completed [2025-09-06 15:36:13][352693791617158][8457 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:36:13][352693791617158][8504 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:36:13][352693791617158][8504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:36:13][352693791617158][8551 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:36:13][352693791617158][8551 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:36:16][352693791617158][11566 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 15:36:16][352693791617158][11566 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693791617158\",\"model\":\"SM-S721W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7932\"}'\'' -e'"" [2025-09-06 15:36:21][352693791617158][16659 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2973c54c-eb8a-4497-ae79-cc58087d7fc2","id":"QR_2973c54c-eb8a-4497-ae79-cc58087d7fc2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:36:21][352693791617158][16815 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-09-06 15:36:21][352693791617158][16815 ms][DEBUG] END runCmdUntilRes#2 in 5249 ms [2025-09-06 15:36:21][352693791617158][16815 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:36:25][352693791617158][0 ms][INFO] === Request start === [2025-09-06 15:36:25][352693791617158][1 ms][DEBUG] START check_scloud [2025-09-06 15:36:25][352693791617158][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:36:25][352693791617158][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 20039 22065 23874912 123640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:36:25][352693791617158][268 ms][DEBUG] targetPkg: running [2025-09-06 15:36:25][352693791617158][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-06 15:36:25][352693791617158][268 ms][DEBUG] START check_boot_completed [2025-09-06 15:36:25][352693791617158][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:36:25][352693791617158][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:36:25][352693791617158][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:36:25][352693791617158][377 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:36:25][352693791617158][377 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:36:25][352693791617158][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:36:25][352693791617158][471 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4515\nsuccessfulTxPacketsPerSecond: 0.0531807047108133\nretriedTxPackets: 1110\nretriedTxPacketsPerSecond: 0.046533116621961634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4062\nsuccessfulRxPacketsPerSecond: 0.02659035235540665\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:36:25][352693791617158][471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:36:26][352693791617158][830 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.941/267.941/267.941/0.000 ms\n [2025-09-06 15:36:26][352693791617158][830 ms][DEBUG] check_internet: online [2025-09-06 15:36:26][352693791617158][830 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:36:26][352693791617158][830 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693791617158\",\"model\":\"SM-S721W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1067\"}'\'' -e'"" [2025-09-06 15:36:26][352693791617158][830 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:36:26][352693791617158][830 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352693791617158\",\"model\":\"SM-S721W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1067\"}'\'' -e'"" [2025-09-06 15:36:30][352693791617158][5360 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7a0a1c6-1afb-4200-93e5-a7f747125e84","id":"QR_c7a0a1c6-1afb-4200-93e5-a7f747125e84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:36:30][352693791617158][5516 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-06 15:36:30][352693791617158][5516 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-06 15:36:30][352693791617158][5516 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:36:32][350832442348548][0 ms][INFO] === Request start === [2025-09-06 15:36:32][350832442348548][1 ms][DEBUG] START check_scloud [2025-09-06 15:36:32][350832442348548][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:36:32][350832442348548][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 20039 22065 24066768 137128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:36:32][350832442348548][309 ms][DEBUG] targetPkg: running [2025-09-06 15:36:32][350832442348548][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 15:36:32][350832442348548][309 ms][DEBUG] START check_boot_completed [2025-09-06 15:36:32][350832442348548][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:36:32][350832442348548][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:36:32][350832442348548][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:36:33][350832442348548][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:36:33][350832442348548][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:36:33][350832442348548][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:36:33][350832442348548][528 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4515\nsuccessfulTxPacketsPerSecond: 0.0531807047108133\nretriedTxPackets: 1110\nretriedTxPacketsPerSecond: 0.046533116621961634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4062\nsuccessfulRxPacketsPerSecond: 0.02659035235540665\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:36:33][350832442348548][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:36:33][350832442348548][902 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.518/268.518/268.518/0.000 ms\n [2025-09-06 15:36:33][350832442348548][902 ms][DEBUG] check_internet: online [2025-09-06 15:36:33][350832442348548][902 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:36:33][350832442348548][903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442348548\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4634\"}'\'' -e'"" [2025-09-06 15:36:33][350832442348548][903 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:36:33][350832442348548][903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442348548\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4634\"}'\'' -e'"" [2025-09-06 15:36:36][350832442348548][4198 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a9b2793-5e9d-4ddf-aaad-74541c65270c","id":"QR_0a9b2793-5e9d-4ddf-aaad-74541c65270c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:36:36][350832442348548][4354 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=3343 [2025-09-06 15:36:36][350832442348548][4355 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-09-06 15:36:36][350832442348548][4355 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:36:39][350832442348548][0 ms][INFO] === Request start === [2025-09-06 15:36:39][350832442348548][1 ms][DEBUG] START check_scloud [2025-09-06 15:36:39][350832442348548][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:36:39][350832442348548][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 20039 22065 24178612 149796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:36:39][350832442348548][317 ms][DEBUG] targetPkg: running [2025-09-06 15:36:39][350832442348548][317 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 15:36:39][350832442348548][317 ms][DEBUG] START check_boot_completed [2025-09-06 15:36:39][350832442348548][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:36:39][350832442348548][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:36:39][350832442348548][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:36:39][350832442348548][410 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:36:39][350832442348548][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:36:39][350832442348548][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:36:39][350832442348548][520 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4515\nsuccessfulTxPacketsPerSecond: 0.0531807047108133\nretriedTxPackets: 1110\nretriedTxPacketsPerSecond: 0.046533116621961634\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4062\nsuccessfulRxPacketsPerSecond: 0.02659035235540665\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:36:39][350832442348548][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:36:40][350832442348548][879 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.017/251.017/251.017/0.000 ms\n [2025-09-06 15:36:40][350832442348548][879 ms][DEBUG] check_internet: online [2025-09-06 15:36:40][350832442348548][879 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:36:40][350832442348548][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442348548\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8460\"}'\'' -e'"" [2025-09-06 15:36:40][350832442348548][879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:36:40][350832442348548][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442348548\",\"model\":\"SM-M156B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8460\"}'\'' -e'"" [2025-09-06 15:36:44][350832442348548][5206 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a18b971b-be9e-4c2c-9a20-70b4ef86392a","id":"QR_a18b971b-be9e-4c2c-9a20-70b4ef86392a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:36:44][350832442348548][5362 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-09-06 15:36:44][350832442348548][5362 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-09-06 15:36:44][350832442348548][5362 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:37:04][356927266332075][0 ms][INFO] === Request start === [2025-09-06 15:37:04][356927266332075][1 ms][DEBUG] START check_scloud [2025-09-06 15:37:04][356927266332075][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:37:04][356927266332075][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 20039 22065 24201888 161584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:37:04][356927266332075][273 ms][DEBUG] targetPkg: running [2025-09-06 15:37:04][356927266332075][273 ms][DEBUG] END check_scloud in 272 ms [2025-09-06 15:37:04][356927266332075][273 ms][DEBUG] START check_boot_completed [2025-09-06 15:37:04][356927266332075][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:37:04][356927266332075][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:37:04][356927266332075][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:37:04][356927266332075][366 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:37:04][356927266332075][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:37:04][356927266332075][366 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:37:04][356927266332075][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927266332075\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2626\"}'\'' -e'"" [2025-09-06 15:37:04][356927266332075][366 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:37:04][356927266332075][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927266332075\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2626\"}'\'' -e'"" [2025-09-06 15:37:09][356927266332075][5146 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43991760-3d1f-490b-81b6-baa6119e2fa1","id":"QR_43991760-3d1f-490b-81b6-baa6119e2fa1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:37:09][356927266332075][5303 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-06 15:37:09][356927266332075][5303 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-06 15:37:09][356927266332075][5303 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:37:13][356927266332075][0 ms][INFO] === Request start === [2025-09-06 15:37:13][356927266332075][1 ms][DEBUG] START check_scloud [2025-09-06 15:37:13][356927266332075][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:37:13][356927266332075][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 20039 22065 24366824 171636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:37:13][356927266332075][261 ms][DEBUG] targetPkg: running [2025-09-06 15:37:13][356927266332075][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 15:37:13][356927266332075][261 ms][DEBUG] START check_boot_completed [2025-09-06 15:37:13][356927266332075][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:37:13][356927266332075][308 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:37:13][356927266332075][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:37:13][356927266332075][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:37:13][356927266332075][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:37:13][356927266332075][354 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:37:13][356927266332075][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927266332075\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4641\"}'\'' -e'"" [2025-09-06 15:37:13][356927266332075][355 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:37:13][356927266332075][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927266332075\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4641\"}'\'' -e'"" [2025-09-06 15:37:16][356927266332075][3791 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a323f44a-4265-4eaf-a6ef-cec0a226794e","id":"QR_a323f44a-4265-4eaf-a6ef-cec0a226794e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:37:17][356927266332075][3947 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=3343 [2025-09-06 15:37:17][356927266332075][3947 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-09-06 15:37:17][356927266332075][3947 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:39:03][357962505865782][1 ms][INFO] === Request start === [2025-09-06 15:39:03][357962505865782][1 ms][DEBUG] START check_scloud [2025-09-06 15:39:03][357962505865782][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:39:03][357962505865782][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 20039 22065 24485788 184012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:39:03][357962505865782][264 ms][DEBUG] targetPkg: running [2025-09-06 15:39:03][357962505865782][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-06 15:39:03][357962505865782][264 ms][DEBUG] START check_boot_completed [2025-09-06 15:39:03][357962505865782][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:39:03][357962505865782][311 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:39:03][357962505865782][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:39:03][357962505865782][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:39:03][357962505865782][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:39:03][357962505865782][358 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:39:03][357962505865782][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505865782\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8315\"}'\'' -e'"" [2025-09-06 15:39:03][357962505865782][358 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:39:03][357962505865782][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505865782\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8315\"}'\'' -e'"" [2025-09-06 15:39:08][357962505865782][5138 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0dd43e49-31da-47fe-a629-82cbde9a7f46","id":"QR_0dd43e49-31da-47fe-a629-82cbde9a7f46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:39:08][357962505865782][5294 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-06 15:39:08][357962505865782][5294 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-06 15:39:08][357962505865782][5294 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:39:10][353574991663037][0 ms][INFO] === Request start === [2025-09-06 15:39:10][353574991663037][1 ms][DEBUG] START check_scloud [2025-09-06 15:39:10][353574991663037][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:39:11][353574991663037][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 20039 22065 24626276 194912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:39:11][353574991663037][287 ms][DEBUG] targetPkg: running [2025-09-06 15:39:11][353574991663037][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-06 15:39:11][353574991663037][287 ms][DEBUG] START check_boot_completed [2025-09-06 15:39:11][353574991663037][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:39:11][353574991663037][332 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 15:39:11][353574991663037][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:39:11][353574991663037][394 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 15:39:11][353574991663037][395 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 15:39:11][353574991663037][395 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:39:11][353574991663037][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353574991663037\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7258\"}'\'' -e'"" [2025-09-06 15:39:11][353574991663037][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:39:11][353574991663037][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353574991663037\",\"model\":\"SM-S911B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7258\"}'\'' -e'"" [2025-09-06 15:39:14][353574991663037][3800 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb431f0d-1348-4047-b6e3-3fec517a6b41","id":"QR_eb431f0d-1348-4047-b6e3-3fec517a6b41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:39:14][353574991663037][3956 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-06 15:39:14][353574991663037][3956 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-09-06 15:39:14][353574991663037][3956 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:39:18][352042190504577][0 ms][INFO] === Request start === [2025-09-06 15:39:18][352042190504577][1 ms][DEBUG] START check_scloud [2025-09-06 15:39:18][352042190504577][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:39:18][352042190504577][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 20039 22065 24778988 206712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:39:18][352042190504577][320 ms][DEBUG] targetPkg: running [2025-09-06 15:39:18][352042190504577][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 15:39:18][352042190504577][320 ms][DEBUG] START check_boot_completed [2025-09-06 15:39:18][352042190504577][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:39:18][352042190504577][367 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:39:18][352042190504577][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:39:18][352042190504577][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:39:18][352042190504577][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:39:18][352042190504577][429 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:39:18][352042190504577][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042190504577\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BVO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6122\"}'\'' -e'"" [2025-09-06 15:39:18][352042190504577][430 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:39:18][352042190504577][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042190504577\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BVO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6122\"}'\'' -e'"" [2025-09-06 15:39:23][352042190504577][5553 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82b2bd40-d588-486c-a50c-ff43724d1abf","id":"QR_82b2bd40-d588-486c-a50c-ff43724d1abf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:39:23][352042190504577][5709 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-09-06 15:39:23][352042190504577][5709 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-06 15:39:23][352042190504577][5709 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:39:28][352060487657320][0 ms][INFO] === Request start === [2025-09-06 15:39:28][352060487657320][1 ms][DEBUG] START check_scloud [2025-09-06 15:39:28][352060487657320][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:39:28][352060487657320][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 20039 22065 24892880 217960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:39:28][352060487657320][314 ms][DEBUG] targetPkg: running [2025-09-06 15:39:28][352060487657320][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 15:39:28][352060487657320][314 ms][DEBUG] START check_boot_completed [2025-09-06 15:39:28][352060487657320][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:39:28][352060487657320][358 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 15:39:28][352060487657320][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:39:28][352060487657320][421 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 15:39:28][352060487657320][421 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 15:39:28][352060487657320][421 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:39:28][352060487657320][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487657320\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5206\"}'\'' -e'"" [2025-09-06 15:39:28][352060487657320][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:39:28][352060487657320][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487657320\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5206\"}'\'' -e'"" [2025-09-06 15:39:32][352060487657320][3858 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e72d8aad-f96d-4029-8e29-f5230cc99f64","id":"QR_e72d8aad-f96d-4029-8e29-f5230cc99f64","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:39:32][352060487657320][4014 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-06 15:39:32][352060487657320][4014 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-09-06 15:39:32][352060487657320][4014 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:42:03][353684146300888][1 ms][INFO] === Request start === [2025-09-06 15:42:03][353684146300888][1 ms][DEBUG] START check_scloud [2025-09-06 15:42:03][353684146300888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:42:04][353684146300888][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 20039 22065 25040392 230028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:42:04][353684146300888][280 ms][DEBUG] targetPkg: running [2025-09-06 15:42:04][353684146300888][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-06 15:42:04][353684146300888][280 ms][DEBUG] START check_boot_completed [2025-09-06 15:42:04][353684146300888][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:42:04][353684146300888][312 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:42:04][353684146300888][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:42:04][353684146300888][374 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 15:42:04][353684146300888][375 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:42:04][353684146300888][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:42:04][353684146300888][515 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4626\nsuccessfulTxPacketsPerSecond: 0.7425494196742148\nretriedTxPackets: 1143\nretriedTxPacketsPerSecond: 0.22075793557882062\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4158\nsuccessfulRxPacketsPerSecond: 0.6422049035020236\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:42:04][353684146300888][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:42:05][353684146300888][1749 ms][DEBUG] SU: done in 1234 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.113/221.113/221.113/0.000 ms\n [2025-09-06 15:42:05][353684146300888][1749 ms][DEBUG] check_internet: online [2025-09-06 15:42:05][353684146300888][1749 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:42:05][353684146300888][1749 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684146300888\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4106\"}'\'' -e'"" [2025-09-06 15:42:05][353684146300888][1749 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:42:05][353684146300888][1749 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684146300888\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4106\"}'\'' -e'"" [2025-09-06 15:42:09][353684146300888][5373 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c10c2c55-92e8-4858-8461-7b77d5cc0025","id":"QR_c10c2c55-92e8-4858-8461-7b77d5cc0025","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:42:09][353684146300888][5529 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-09-06 15:42:09][353684146300888][5529 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-06 15:42:09][353684146300888][5530 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:42:11][353684146300888][0 ms][INFO] === Request start === [2025-09-06 15:42:11][353684146300888][1 ms][DEBUG] START check_scloud [2025-09-06 15:42:11][353684146300888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:42:12][353684146300888][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 20039 22065 25203348 240844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:42:12][353684146300888][254 ms][DEBUG] targetPkg: running [2025-09-06 15:42:12][353684146300888][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 15:42:12][353684146300888][254 ms][DEBUG] START check_boot_completed [2025-09-06 15:42:12][353684146300888][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:42:12][353684146300888][300 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:42:12][353684146300888][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:42:12][353684146300888][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:42:12][353684146300888][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:42:12][353684146300888][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:42:12][353684146300888][457 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1180202 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4841\nsuccessfulTxPacketsPerSecond: 0.7113763975237484\nretriedTxPackets: 1182\nretriedTxPacketsPerSecond: 0.12904036978337763\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4340\nsuccessfulRxPacketsPerSecond: 0.6021883923224288\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:42:12][353684146300888][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:42:12][353684146300888][800 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.415/228.415/228.415/0.000 ms\n [2025-09-06 15:42:12][353684146300888][800 ms][DEBUG] check_internet: online [2025-09-06 15:42:12][353684146300888][800 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:42:12][353684146300888][800 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684146300888\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4614\"}'\'' -e'"" [2025-09-06 15:42:12][353684146300888][800 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:42:12][353684146300888][801 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684146300888\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4614\"}'\'' -e'"" [2025-09-06 15:42:20][353684146300888][8673 ms][DEBUG] proc_open done in 7873 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 15:42:20][353684146300888][8673 ms][DEBUG] END runCmdUntilRes#1 in 7873 ms [2025-09-06 15:42:20][353684146300888][8673 ms][WARN] Detected error: Process with pid 20039 either refused to load frida-agent, or terminated during injectionProcess with pid 20039 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 15:42:20][353684146300888][8673 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 15:42:20][353684146300888][9048 ms][DEBUG] SU: done in 375 ms; out [2025-09-06 15:42:20][353684146300888][9048 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 15:42:21][353684146300888][9282 ms][DEBUG] SU: done in 234 ms; out [2025-09-06 15:42:21][353684146300888][9283 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 15:42:21][353684146300888][9283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 15:42:21][353684146300888][9657 ms][DEBUG] SU: done in 375 ms; out [2025-09-06 15:42:21][353684146300888][9658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 15:42:21][353684146300888][9892 ms][DEBUG] SU: done in 235 ms; out [2025-09-06 15:42:23][353684146300888][11907 ms][DEBUG] START check_boot_completed [2025-09-06 15:42:23][353684146300888][11907 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:42:23][353684146300888][11954 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:42:23][353684146300888][11954 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:42:23][353684146300888][12000 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:42:23][353684146300888][12000 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:42:26][353684146300888][15015 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 15:42:26][353684146300888][15015 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684146300888\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4614\"}'\'' -e'"" [2025-09-06 15:42:28][353684146300888][16484 ms][DEBUG] proc_open done in 1469 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-06 15:42:28][353684146300888][16484 ms][DEBUG] END runCmdUntilRes#2 in 1469 ms [2025-09-06 15:42:28][353684146300888][16484 ms][WARN] Detected error 2; Reboot the device [2025-09-06 15:42:28][353684146300888][16484 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 15:42:28][353684146300888][16734 ms][DEBUG] SU: done in 250 ms; outsystem 22115 21766 7228164 121648 0 0 R system_server\n [2025-09-06 15:42:28][353684146300888][16735 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-06 15:42:29][353684146300888][17359 ms][DEBUG] SU: done in 624 ms; out [2025-09-06 15:43:03][353204331608373][0 ms][INFO] === Request start === [2025-09-06 15:43:03][353204331608373][1 ms][DEBUG] START check_scloud [2025-09-06 15:43:03][353204331608373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:43:03][353204331608373][46 ms][DEBUG] SU: done in 45 ms; out [2025-09-06 15:43:03][353204331608373][46 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 15:43:03][353204331608373][77 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 15:43:03][353204331608373][77 ms][WARN] check_devices: no device [2025-09-06 15:43:03][353204331608373][77 ms][WARN] check_devices: no device [2025-09-06 15:43:03][353204331608373][77 ms][DEBUG] END check_scloud in 76 ms [2025-09-06 15:43:07][351681593316211][0 ms][INFO] === Request start === [2025-09-06 15:43:07][351681593316211][1 ms][DEBUG] START check_scloud [2025-09-06 15:43:07][351681593316211][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:43:07][351681593316211][39 ms][DEBUG] SU: done in 38 ms; out [2025-09-06 15:43:07][351681593316211][39 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 15:43:07][351681593316211][70 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 15:43:07][351681593316211][70 ms][WARN] check_devices: no device [2025-09-06 15:43:07][351681593316211][70 ms][WARN] check_devices: no device [2025-09-06 15:43:07][351681593316211][70 ms][DEBUG] END check_scloud in 69 ms [2025-09-06 15:44:03][353204331608373][0 ms][INFO] === Request start === [2025-09-06 15:44:03][353204331608373][1 ms][DEBUG] START check_scloud [2025-09-06 15:44:03][353204331608373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:44:03][353204331608373][412 ms][DEBUG] SU: done in 411 ms; out [2025-09-06 15:44:03][353204331608373][412 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 15:44:03][353204331608373][443 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 15:44:03][353204331608373][443 ms][DEBUG] check_devices: device found [2025-09-06 15:44:03][353204331608373][443 ms][WARN] targetPkg: not running, restarting [2025-09-06 15:44:03][353204331608373][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 15:44:04][353204331608373][584 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 15:44:04][353204331608373][584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 15:44:04][353204331608373][819 ms][DEBUG] SU: done in 235 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 15:44:06][353204331608373][2833 ms][DEBUG] END check_scloud in 2833 ms [2025-09-06 15:44:06][353204331608373][2834 ms][DEBUG] START check_boot_completed [2025-09-06 15:44:06][353204331608373][2834 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:44:06][353204331608373][2881 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:44:06][353204331608373][2881 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:44:06][353204331608373][2974 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 15:44:06][353204331608373][2974 ms][DEBUG] END check_boot_completed in 141 ms [2025-09-06 15:44:06][353204331608373][2974 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:44:06][353204331608373][3302 ms][DEBUG] SU: done in 328 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 199\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 11\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 188\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:44:06][353204331608373][3303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:44:07][353204331608373][4177 ms][DEBUG] SU: done in 874 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.087/222.087/222.087/0.000 ms\n [2025-09-06 15:44:07][353204331608373][4177 ms][DEBUG] check_internet: online [2025-09-06 15:44:07][353204331608373][4177 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:44:07][353204331608373][4177 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204331608373\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9669\"}'\'' -e'"" [2025-09-06 15:44:07][353204331608373][4177 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:44:07][353204331608373][4177 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204331608373\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9669\"}'\'' -e'"" [2025-09-06 15:44:13][353204331608373][10222 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b402575a-3953-4539-8df1-40b177e64dba","id":"QR_b402575a-3953-4539-8df1-40b177e64dba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:44:13][353204331608373][10379 ms][DEBUG] proc_open done in 6201 ms; code=255; res.len=3343 [2025-09-06 15:44:13][353204331608373][10379 ms][DEBUG] END runCmdUntilRes#1 in 6201 ms [2025-09-06 15:44:13][353204331608373][10379 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:44:16][353204331608373][1 ms][INFO] === Request start === [2025-09-06 15:44:16][353204331608373][1 ms][DEBUG] START check_scloud [2025-09-06 15:44:16][353204331608373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:44:16][353204331608373][357 ms][DEBUG] SU: done in 356 ms; outu0_a118 10296 4991 23724196 113280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:44:16][353204331608373][357 ms][DEBUG] targetPkg: running [2025-09-06 15:44:16][353204331608373][357 ms][DEBUG] END check_scloud in 356 ms [2025-09-06 15:44:16][353204331608373][357 ms][DEBUG] START check_boot_completed [2025-09-06 15:44:16][353204331608373][357 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:44:16][353204331608373][404 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:44:16][353204331608373][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:44:16][353204331608373][466 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:44:16][353204331608373][466 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:44:16][353204331608373][467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:44:16][353204331608373][622 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 199\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 11\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 188\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:44:16][353204331608373][623 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:44:17][353204331608373][1091 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=283 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 283.431/283.431/283.431/0.000 ms\n [2025-09-06 15:44:17][353204331608373][1091 ms][DEBUG] check_internet: online [2025-09-06 15:44:17][353204331608373][1091 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:44:17][353204331608373][1091 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204331608373\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5103\"}'\'' -e'"" [2025-09-06 15:44:17][353204331608373][1092 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:44:17][353204331608373][1092 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204331608373\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5103\"}'\'' -e'"" [2025-09-06 15:44:23][353204331608373][7683 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_108a2466-f914-4ba9-bf53-73054bc211d5","id":"QR_108a2466-f914-4ba9-bf53-73054bc211d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:44:24][353204331608373][7839 ms][DEBUG] proc_open done in 6748 ms; code=255; res.len=3343 [2025-09-06 15:44:24][353204331608373][7839 ms][DEBUG] END runCmdUntilRes#1 in 6748 ms [2025-09-06 15:44:24][353204331608373][7839 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:44:28][351681593316211][0 ms][INFO] === Request start === [2025-09-06 15:44:28][351681593316211][1 ms][DEBUG] START check_scloud [2025-09-06 15:44:28][351681593316211][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:44:28][351681593316211][386 ms][DEBUG] SU: done in 385 ms; outu0_a118 10296 4991 23925388 81352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:44:28][351681593316211][386 ms][DEBUG] targetPkg: running [2025-09-06 15:44:28][351681593316211][386 ms][DEBUG] END check_scloud in 385 ms [2025-09-06 15:44:28][351681593316211][386 ms][DEBUG] START check_boot_completed [2025-09-06 15:44:28][351681593316211][386 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:44:28][351681593316211][432 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:44:28][351681593316211][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:44:28][351681593316211][495 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 15:44:28][351681593316211][495 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:44:28][351681593316211][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:44:29][351681593316211][620 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 460\nsuccessfulTxPacketsPerSecond: 10.942281953580341\nretriedTxPackets: 41\nretriedTxPacketsPerSecond: 1.257733557882798\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 469\nsuccessfulRxPacketsPerSecond: 11.780770992168874\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:44:29][351681593316211][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:44:29][351681593316211][1135 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=382 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 382.131/382.131/382.131/0.000 ms\n [2025-09-06 15:44:29][351681593316211][1135 ms][DEBUG] check_internet: online [2025-09-06 15:44:29][351681593316211][1135 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:44:29][351681593316211][1135 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681593316211\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4019\"}'\'' -e'"" [2025-09-06 15:44:29][351681593316211][1136 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:44:29][351681593316211][1136 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681593316211\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4019\"}'\'' -e'"" [2025-09-06 15:44:34][351681593316211][5978 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ad50bdb-8a35-4568-b80d-a6323f10c5ce","id":"QR_1ad50bdb-8a35-4568-b80d-a6323f10c5ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:44:34][351681593316211][6134 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-06 15:44:34][351681593316211][6134 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-06 15:44:34][351681593316211][6134 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:44:36][351681593316211][0 ms][INFO] === Request start === [2025-09-06 15:44:36][351681593316211][1 ms][DEBUG] START check_scloud [2025-09-06 15:44:36][351681593316211][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:44:37][351681593316211][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 10296 4991 23998144 82480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:44:37][351681593316211][318 ms][DEBUG] targetPkg: running [2025-09-06 15:44:37][351681593316211][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 15:44:37][351681593316211][318 ms][DEBUG] START check_boot_completed [2025-09-06 15:44:37][351681593316211][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:44:37][351681593316211][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:44:37][351681593316211][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:44:37][351681593316211][428 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 15:44:37][351681593316211][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:44:37][351681593316211][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:44:37][351681593316211][584 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 764\nsuccessfulTxPacketsPerSecond: 30.14077790159526\nretriedTxPackets: 79\nretriedTxPacketsPerSecond: 3.763457564705699\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 856\nsuccessfulRxPacketsPerSecond: 38.28916569739614\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:44:37][351681593316211][584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:44:37][351681593316211][959 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.039/272.039/272.039/0.000 ms\n [2025-09-06 15:44:37][351681593316211][959 ms][DEBUG] check_internet: online [2025-09-06 15:44:37][351681593316211][959 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:44:37][351681593316211][959 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681593316211\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1235\"}'\'' -e'"" [2025-09-06 15:44:37][351681593316211][959 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:44:37][351681593316211][959 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681593316211\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1235\"}'\'' -e'"" [2025-09-06 15:44:43][351681593316211][6114 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aac87955-7b45-4253-9e6f-f1802fd3cfac","id":"QR_aac87955-7b45-4253-9e6f-f1802fd3cfac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:44:43][351681593316211][6270 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 15:44:43][351681593316211][6270 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 15:44:43][351681593316211][6270 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:45:03][352677532369021][0 ms][INFO] === Request start === [2025-09-06 15:45:03][352677532369021][1 ms][DEBUG] START check_scloud [2025-09-06 15:45:03][352677532369021][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:45:03][352677532369021][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 10296 4991 24083228 66304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:45:03][352677532369021][318 ms][DEBUG] targetPkg: running [2025-09-06 15:45:03][352677532369021][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 15:45:03][352677532369021][318 ms][DEBUG] START check_boot_completed [2025-09-06 15:45:03][352677532369021][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:45:03][352677532369021][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:45:03][352677532369021][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:45:04][352677532369021][412 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:45:04][352677532369021][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:45:04][352677532369021][412 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:45:04][352677532369021][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532369021\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3304\"}'\'' -e'"" [2025-09-06 15:45:04][352677532369021][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:45:04][352677532369021][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532369021\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3304\"}'\'' -e'"" [2025-09-06 15:45:08][352677532369021][4598 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_adaf57bc-e1ff-48ff-8f00-cbb6c5e5dcd1","id":"QR_adaf57bc-e1ff-48ff-8f00-cbb6c5e5dcd1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:45:08][352677532369021][4754 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-09-06 15:45:08][352677532369021][4755 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-09-06 15:45:08][352677532369021][4755 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:45:10][352677532369021][0 ms][INFO] === Request start === [2025-09-06 15:45:10][352677532369021][1 ms][DEBUG] START check_scloud [2025-09-06 15:45:10][352677532369021][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:45:11][352677532369021][341 ms][DEBUG] SU: done in 340 ms; outu0_a118 10296 4991 24187480 80232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:45:11][352677532369021][341 ms][DEBUG] targetPkg: running [2025-09-06 15:45:11][352677532369021][341 ms][DEBUG] END check_scloud in 341 ms [2025-09-06 15:45:11][352677532369021][341 ms][DEBUG] START check_boot_completed [2025-09-06 15:45:11][352677532369021][341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:45:11][352677532369021][386 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 15:45:11][352677532369021][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:45:11][352677532369021][449 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 15:45:11][352677532369021][449 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-06 15:45:11][352677532369021][449 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:45:11][352677532369021][449 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532369021\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1342\"}'\'' -e'"" [2025-09-06 15:45:11][352677532369021][449 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:45:11][352677532369021][449 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532369021\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1342\"}'\'' -e'"" [2025-09-06 15:45:16][352677532369021][5385 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11d7374f-46fe-4aae-9570-f30334d0f417","id":"QR_11d7374f-46fe-4aae-9570-f30334d0f417","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:45:16][352677532369021][5541 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-06 15:45:16][352677532369021][5541 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-06 15:45:16][352677532369021][5541 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:46:04][351864716213149][0 ms][INFO] === Request start === [2025-09-06 15:46:04][351864716213149][1 ms][DEBUG] START check_scloud [2025-09-06 15:46:04][351864716213149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:46:05][351864716213149][326 ms][DEBUG] SU: done in 326 ms; outu0_a118 10296 4991 24325784 97656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:46:05][351864716213149][327 ms][DEBUG] targetPkg: running [2025-09-06 15:46:05][351864716213149][327 ms][DEBUG] END check_scloud in 326 ms [2025-09-06 15:46:05][351864716213149][327 ms][DEBUG] START check_boot_completed [2025-09-06 15:46:05][351864716213149][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:46:05][351864716213149][373 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:46:05][351864716213149][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:46:05][351864716213149][420 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:46:05][351864716213149][421 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:46:05][351864716213149][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:46:05][351864716213149][576 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 831\nsuccessfulTxPacketsPerSecond: 6.976955983703472\nretriedTxPackets: 97\nretriedTxPacketsPerSecond: 1.7498701288620586\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 916\nsuccessfulRxPacketsPerSecond: 6.572642915261724\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:46:05][351864716213149][577 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:46:05][351864716213149][983 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.759/273.759/273.759/0.000 ms\n [2025-09-06 15:46:05][351864716213149][983 ms][DEBUG] check_internet: online [2025-09-06 15:46:05][351864716213149][983 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:46:05][351864716213149][983 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864716213149\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6159\"}'\'' -e'"" [2025-09-06 15:46:05][351864716213149][983 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:46:05][351864716213149][983 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864716213149\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6159\"}'\'' -e'"" [2025-09-06 15:46:11][351864716213149][6231 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92cf43e1-f549-4788-a4db-eb8c4d7c3b39","id":"QR_92cf43e1-f549-4788-a4db-eb8c4d7c3b39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:46:11][351864716213149][6387 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-06 15:46:11][351864716213149][6387 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-06 15:46:11][351864716213149][6387 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:46:14][351864716213149][0 ms][INFO] === Request start === [2025-09-06 15:46:14][351864716213149][1 ms][DEBUG] START check_scloud [2025-09-06 15:46:14][351864716213149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:46:15][351864716213149][334 ms][DEBUG] SU: done in 334 ms; outu0_a118 10296 4991 24470304 110692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:46:15][351864716213149][335 ms][DEBUG] targetPkg: running [2025-09-06 15:46:15][351864716213149][335 ms][DEBUG] END check_scloud in 334 ms [2025-09-06 15:46:15][351864716213149][335 ms][DEBUG] START check_boot_completed [2025-09-06 15:46:15][351864716213149][335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:46:15][351864716213149][381 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:46:15][351864716213149][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:46:15][351864716213149][475 ms][DEBUG] SU: done in 93 ms; out [2025-09-06 15:46:15][351864716213149][475 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 15:46:15][351864716213149][475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:46:15][351864716213149][584 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 831\nsuccessfulTxPacketsPerSecond: 6.976955983703472\nretriedTxPackets: 97\nretriedTxPacketsPerSecond: 1.7498701288620586\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 916\nsuccessfulRxPacketsPerSecond: 6.572642915261724\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:46:15][351864716213149][585 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:46:15][351864716213149][1022 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=324 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 324.834/324.834/324.834/0.000 ms\n [2025-09-06 15:46:15][351864716213149][1022 ms][DEBUG] check_internet: online [2025-09-06 15:46:15][351864716213149][1022 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:46:15][351864716213149][1022 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864716213149\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4164\"}'\'' -e'"" [2025-09-06 15:46:15][351864716213149][1022 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:46:15][351864716213149][1022 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864716213149\",\"model\":\"SM-A155M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4164\"}'\'' -e'"" [2025-09-06 15:46:19][351864716213149][4849 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbecb54d-d6fd-4581-9ee8-b2d105e0127f","id":"QR_cbecb54d-d6fd-4581-9ee8-b2d105e0127f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:46:19][351864716213149][5005 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-09-06 15:46:19][351864716213149][5005 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-06 15:46:19][351864716213149][5005 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:46:22][354952834630752][1 ms][INFO] === Request start === [2025-09-06 15:46:22][354952834630752][1 ms][DEBUG] START check_scloud [2025-09-06 15:46:22][354952834630752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:46:23][354952834630752][263 ms][DEBUG] SU: done in 261 ms; outu0_a118 10296 4991 24627240 120248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:46:23][354952834630752][263 ms][DEBUG] targetPkg: running [2025-09-06 15:46:23][354952834630752][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-06 15:46:23][354952834630752][263 ms][DEBUG] START check_boot_completed [2025-09-06 15:46:23][354952834630752][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:46:23][354952834630752][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:46:23][354952834630752][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:46:23][354952834630752][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:46:23][354952834630752][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:46:23][354952834630752][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:46:23][354952834630752][466 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 831\nsuccessfulTxPacketsPerSecond: 6.976955983703472\nretriedTxPackets: 97\nretriedTxPacketsPerSecond: 1.7498701288620586\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 916\nsuccessfulRxPacketsPerSecond: 6.572642915261724\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:46:23][354952834630752][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:46:23][354952834630752][950 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=364 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 364.788/364.788/364.788/0.000 ms\n [2025-09-06 15:46:23][354952834630752][950 ms][DEBUG] check_internet: online [2025-09-06 15:46:23][354952834630752][950 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:46:23][354952834630752][950 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952834630752\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6810\"}'\'' -e'"" [2025-09-06 15:46:23][354952834630752][950 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:46:23][354952834630752][950 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952834630752\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6810\"}'\'' -e'"" [2025-09-06 15:46:28][354952834630752][5699 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ae2457b-a9b3-4217-8ed2-f3ed9c503c67","id":"QR_5ae2457b-a9b3-4217-8ed2-f3ed9c503c67","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:46:28][354952834630752][5855 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-06 15:46:28][354952834630752][5855 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 15:46:28][354952834630752][5855 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:46:32][354952834630752][0 ms][INFO] === Request start === [2025-09-06 15:46:32][354952834630752][1 ms][DEBUG] START check_scloud [2025-09-06 15:46:32][354952834630752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:46:32][354952834630752][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 10296 4991 24751372 128016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:46:32][354952834630752][328 ms][DEBUG] targetPkg: running [2025-09-06 15:46:32][354952834630752][328 ms][DEBUG] END check_scloud in 328 ms [2025-09-06 15:46:32][354952834630752][328 ms][DEBUG] START check_boot_completed [2025-09-06 15:46:32][354952834630752][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:46:32][354952834630752][375 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:46:32][354952834630752][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:46:32][354952834630752][422 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:46:32][354952834630752][422 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:46:32][354952834630752][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:46:32][354952834630752][547 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 831\nsuccessfulTxPacketsPerSecond: 6.976955983703472\nretriedTxPackets: 97\nretriedTxPacketsPerSecond: 1.7498701288620586\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 916\nsuccessfulRxPacketsPerSecond: 6.572642915261724\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:46:32][354952834630752][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:46:33][354952834630752][1001 ms][DEBUG] SU: done in 454 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=318 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 318.178/318.178/318.178/0.000 ms\n [2025-09-06 15:46:33][354952834630752][1001 ms][DEBUG] check_internet: online [2025-09-06 15:46:33][354952834630752][1001 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:46:33][354952834630752][1001 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952834630752\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3995\"}'\'' -e'"" [2025-09-06 15:46:33][354952834630752][1001 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:46:33][354952834630752][1001 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952834630752\",\"model\":\"SM-A217M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3995\"}'\'' -e'"" [2025-09-06 15:46:36][354952834630752][4686 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b37f7c75-236a-4710-8db6-3b13ed691b1c","id":"QR_b37f7c75-236a-4710-8db6-3b13ed691b1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:46:37][354952834630752][4843 ms][DEBUG] proc_open done in 3841 ms; code=255; res.len=3343 [2025-09-06 15:46:37][354952834630752][4843 ms][DEBUG] END runCmdUntilRes#1 in 3841 ms [2025-09-06 15:46:37][354952834630752][4843 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:48:03][352600229386645][1 ms][INFO] === Request start === [2025-09-06 15:48:03][352600229386645][1 ms][DEBUG] START check_scloud [2025-09-06 15:48:03][352600229386645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:48:04][352600229386645][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 10296 4991 24881576 141280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:48:04][352600229386645][307 ms][DEBUG] targetPkg: running [2025-09-06 15:48:04][352600229386645][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 15:48:04][352600229386645][307 ms][DEBUG] START check_boot_completed [2025-09-06 15:48:04][352600229386645][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:48:04][352600229386645][370 ms][DEBUG] ADB: done in 62 ms; out [2025-09-06 15:48:04][352600229386645][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:48:04][352600229386645][432 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:48:04][352600229386645][432 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 15:48:04][352600229386645][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:48:04][352600229386645][541 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 831\nsuccessfulTxPacketsPerSecond: 6.976955983703472\nretriedTxPackets: 97\nretriedTxPacketsPerSecond: 1.7498701288620586\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 916\nsuccessfulRxPacketsPerSecond: 6.572642915261724\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:48:04][352600229386645][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:48:04][352600229386645][948 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.239/300.239/300.239/0.000 ms\n [2025-09-06 15:48:04][352600229386645][948 ms][DEBUG] check_internet: online [2025-09-06 15:48:04][352600229386645][948 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:48:04][352600229386645][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229386645\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7819\"}'\'' -e'"" [2025-09-06 15:48:04][352600229386645][948 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:48:04][352600229386645][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229386645\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7819\"}'\'' -e'"" [2025-09-06 15:48:09][352600229386645][5696 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22b9312e-1096-4ccd-a634-9352c3e07462","id":"QR_22b9312e-1096-4ccd-a634-9352c3e07462","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:48:09][352600229386645][5852 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 15:48:09][352600229386645][5852 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 15:48:09][352600229386645][5853 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:48:12][352600229386645][0 ms][INFO] === Request start === [2025-09-06 15:48:12][352600229386645][0 ms][DEBUG] START check_scloud [2025-09-06 15:48:12][352600229386645][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:48:12][352600229386645][254 ms][DEBUG] SU: done in 254 ms; outu0_a118 10296 4991 25034420 152480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:48:12][352600229386645][255 ms][DEBUG] targetPkg: running [2025-09-06 15:48:12][352600229386645][255 ms][DEBUG] END check_scloud in 255 ms [2025-09-06 15:48:12][352600229386645][255 ms][DEBUG] START check_boot_completed [2025-09-06 15:48:12][352600229386645][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:48:12][352600229386645][285 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 15:48:12][352600229386645][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:48:12][352600229386645][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:48:12][352600229386645][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 15:48:12][352600229386645][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:48:12][352600229386645][442 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 831\nsuccessfulTxPacketsPerSecond: 6.976955983703472\nretriedTxPackets: 97\nretriedTxPacketsPerSecond: 1.7498701288620586\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 916\nsuccessfulRxPacketsPerSecond: 6.572642915261724\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:48:12][352600229386645][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:48:12][352600229386645][879 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=340 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 340.913/340.913/340.913/0.000 ms\n [2025-09-06 15:48:12][352600229386645][879 ms][DEBUG] check_internet: online [2025-09-06 15:48:12][352600229386645][879 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:48:12][352600229386645][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229386645\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2288\"}'\'' -e'"" [2025-09-06 15:48:12][352600229386645][879 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:48:12][352600229386645][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229386645\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2288\"}'\'' -e'"" [2025-09-06 15:48:17][352600229386645][5300 ms][DEBUG] proc_open done in 4421 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 15:48:17][352600229386645][5300 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-09-06 15:48:17][352600229386645][5300 ms][WARN] Detected error: Process with pid 10296 either refused to load frida-agent, or terminated during injectionProcess with pid 10296 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 15:48:17][352600229386645][5300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 15:48:17][352600229386645][5581 ms][DEBUG] SU: done in 281 ms; outsystem 5412 4991 13255860 576388 ep_poll 0 S system_server\n [2025-09-06 15:48:17][352600229386645][5581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 15:48:17][352600229386645][5722 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 15:48:17][352600229386645][5722 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 15:48:17][352600229386645][5722 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 15:48:17][352600229386645][5862 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 15:48:17][352600229386645][5862 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 15:48:18][352600229386645][6034 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 15:48:20][352600229386645][8049 ms][DEBUG] START check_boot_completed [2025-09-06 15:48:20][352600229386645][8049 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:48:20][352600229386645][8080 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:48:20][352600229386645][8080 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:48:20][352600229386645][8128 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:48:20][352600229386645][8128 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 15:48:23][352600229386645][11142 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 15:48:23][352600229386645][11142 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229386645\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2288\"}'\'' -e'"" [2025-09-06 15:48:28][352600229386645][16266 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08e42414-4446-4b58-aae1-8ea8777dcc57","id":"QR_08e42414-4446-4b58-aae1-8ea8777dcc57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:48:28][352600229386645][16422 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-06 15:48:28][352600229386645][16422 ms][DEBUG] END runCmdUntilRes#2 in 5280 ms [2025-09-06 15:48:28][352600229386645][16422 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:51:03][351247570095622][1 ms][INFO] === Request start === [2025-09-06 15:51:03][351247570095622][1 ms][DEBUG] START check_scloud [2025-09-06 15:51:03][351247570095622][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:51:03][351247570095622][255 ms][DEBUG] SU: done in 253 ms; outu0_a118 18676 4991 23629100 125808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:51:03][351247570095622][255 ms][DEBUG] targetPkg: running [2025-09-06 15:51:03][351247570095622][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-06 15:51:03][351247570095622][255 ms][DEBUG] START check_boot_completed [2025-09-06 15:51:03][351247570095622][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:51:03][351247570095622][301 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:51:03][351247570095622][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:51:03][351247570095622][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:51:03][351247570095622][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:51:03][351247570095622][348 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:51:03][351247570095622][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351247570095622\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2839\"}'\'' -e'"" [2025-09-06 15:51:03][351247570095622][348 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:51:03][351247570095622][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351247570095622\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2839\"}'\'' -e'"" [2025-09-06 15:51:08][351247570095622][5144 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2df192b5-80db-4100-9c0e-998f6c4f2f91","id":"QR_2df192b5-80db-4100-9c0e-998f6c4f2f91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:51:08][351247570095622][5300 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-06 15:51:08][351247570095622][5300 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-06 15:51:08][351247570095622][5300 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:51:10][351247570095622][1 ms][INFO] === Request start === [2025-09-06 15:51:10][351247570095622][1 ms][DEBUG] START check_scloud [2025-09-06 15:51:10][351247570095622][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:51:11][351247570095622][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 18676 4991 23763188 136616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:51:11][351247570095622][297 ms][DEBUG] targetPkg: running [2025-09-06 15:51:11][351247570095622][297 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 15:51:11][351247570095622][297 ms][DEBUG] START check_boot_completed [2025-09-06 15:51:11][351247570095622][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:51:11][351247570095622][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:51:11][351247570095622][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:51:11][351247570095622][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:51:11][351247570095622][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:51:11][351247570095622][406 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:51:11][351247570095622][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351247570095622\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1872\"}'\'' -e'"" [2025-09-06 15:51:11][351247570095622][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:51:11][351247570095622][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351247570095622\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1872\"}'\'' -e'"" [2025-09-06 15:51:16][351247570095622][5468 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e326d5b-6754-4024-9af0-1e1093804a17","id":"QR_1e326d5b-6754-4024-9af0-1e1093804a17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:51:16][351247570095622][5624 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 15:51:16][351247570095622][5624 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 15:51:16][351247570095622][5624 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:51:20][351494691908982][0 ms][INFO] === Request start === [2025-09-06 15:51:20][351494691908982][1 ms][DEBUG] START check_scloud [2025-09-06 15:51:20][351494691908982][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:51:21][351494691908982][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18676 4991 23922108 148412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:51:21][351494691908982][306 ms][DEBUG] targetPkg: running [2025-09-06 15:51:21][351494691908982][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 15:51:21][351494691908982][306 ms][DEBUG] START check_boot_completed [2025-09-06 15:51:21][351494691908982][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:51:21][351494691908982][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:51:21][351494691908982][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:51:21][351494691908982][431 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 15:51:21][351494691908982][431 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 15:51:21][351494691908982][431 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:51:21][351494691908982][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351494691908982\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7658\"}'\'' -e'"" [2025-09-06 15:51:21][351494691908982][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:51:21][351494691908982][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351494691908982\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7658\"}'\'' -e'"" [2025-09-06 15:51:24][351494691908982][3946 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1749e2c-d767-4d84-99ab-c89cbe8b0259","id":"QR_b1749e2c-d767-4d84-99ab-c89cbe8b0259","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:51:24][351494691908982][4102 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=3343 [2025-09-06 15:51:24][351494691908982][4102 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-06 15:51:24][351494691908982][4102 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:51:27][351494691908982][0 ms][INFO] === Request start === [2025-09-06 15:51:27][351494691908982][1 ms][DEBUG] START check_scloud [2025-09-06 15:51:27][351494691908982][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:51:27][351494691908982][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 18676 4991 24088672 159652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:51:27][351494691908982][300 ms][DEBUG] targetPkg: running [2025-09-06 15:51:27][351494691908982][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 15:51:27][351494691908982][300 ms][DEBUG] START check_boot_completed [2025-09-06 15:51:27][351494691908982][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:51:27][351494691908982][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:51:27][351494691908982][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:51:27][351494691908982][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:51:27][351494691908982][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:51:27][351494691908982][394 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:51:27][351494691908982][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351494691908982\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7003\"}'\'' -e'"" [2025-09-06 15:51:27][351494691908982][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:51:27][351494691908982][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351494691908982\",\"model\":\"SM-A336E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7003\"}'\'' -e'"" [2025-09-06 15:51:32][351494691908982][5080 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd842b7e-38b8-467a-8fe0-3ddbd54a5683","id":"QR_bd842b7e-38b8-467a-8fe0-3ddbd54a5683","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:51:32][351494691908982][5236 ms][DEBUG] proc_open done in 4843 ms; code=255; res.len=3343 [2025-09-06 15:51:32][351494691908982][5236 ms][DEBUG] END runCmdUntilRes#1 in 4843 ms [2025-09-06 15:51:32][351494691908982][5237 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:52:04][350536250958229][0 ms][INFO] === Request start === [2025-09-06 15:52:04][350536250958229][1 ms][DEBUG] START check_scloud [2025-09-06 15:52:04][350536250958229][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:52:04][350536250958229][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 18676 4991 24193304 170756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:52:04][350536250958229][256 ms][DEBUG] targetPkg: running [2025-09-06 15:52:04][350536250958229][256 ms][DEBUG] END check_scloud in 256 ms [2025-09-06 15:52:04][350536250958229][256 ms][DEBUG] START check_boot_completed [2025-09-06 15:52:04][350536250958229][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:52:04][350536250958229][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:52:04][350536250958229][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:52:04][350536250958229][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:52:04][350536250958229][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:52:04][350536250958229][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:52:04][350536250958229][459 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1240\nsuccessfulTxPacketsPerSecond: 1.6769236446233893\nretriedTxPackets: 195\nretriedTxPacketsPerSecond: 0.401805665459883\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1275\nsuccessfulRxPacketsPerSecond: 1.4719207540826325\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:52:04][350536250958229][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:52:05][350536250958229][1896 ms][DEBUG] SU: done in 1437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=293 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 293.159/293.159/293.159/0.000 ms\n [2025-09-06 15:52:05][350536250958229][1896 ms][DEBUG] check_internet: online [2025-09-06 15:52:05][350536250958229][1897 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:52:05][350536250958229][1897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536250958229\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7754\"}'\'' -e'"" [2025-09-06 15:52:05][350536250958229][1897 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:52:05][350536250958229][1897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536250958229\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7754\"}'\'' -e'"" [2025-09-06 15:52:10][350536250958229][6005 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c393cfe-7f54-4a7d-974e-562bac270c27","id":"QR_8c393cfe-7f54-4a7d-974e-562bac270c27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:52:10][350536250958229][6161 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-09-06 15:52:10][350536250958229][6161 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-09-06 15:52:10][350536250958229][6161 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:52:12][350536250958229][0 ms][INFO] === Request start === [2025-09-06 15:52:12][350536250958229][1 ms][DEBUG] START check_scloud [2025-09-06 15:52:12][350536250958229][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:52:12][350536250958229][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 18676 4991 24379808 182536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:52:12][350536250958229][303 ms][DEBUG] targetPkg: running [2025-09-06 15:52:12][350536250958229][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 15:52:12][350536250958229][303 ms][DEBUG] START check_boot_completed [2025-09-06 15:52:12][350536250958229][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:52:12][350536250958229][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:52:12][350536250958229][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:52:12][350536250958229][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:52:12][350536250958229][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 15:52:12][350536250958229][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:52:13][350536250958229][491 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1240\nsuccessfulTxPacketsPerSecond: 1.6769236446233893\nretriedTxPackets: 195\nretriedTxPacketsPerSecond: 0.401805665459883\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1275\nsuccessfulRxPacketsPerSecond: 1.4719207540826325\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:52:13][350536250958229][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:52:13][350536250958229][850 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.029/250.029/250.029/0.000 ms\n [2025-09-06 15:52:13][350536250958229][850 ms][DEBUG] check_internet: online [2025-09-06 15:52:13][350536250958229][850 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:52:13][350536250958229][851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536250958229\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5968\"}'\'' -e'"" [2025-09-06 15:52:13][350536250958229][851 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:52:13][350536250958229][851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536250958229\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5968\"}'\'' -e'"" [2025-09-06 15:52:18][350536250958229][6208 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a9a2120-e4ef-42f4-bcdd-b8ca1acb5152","id":"QR_1a9a2120-e4ef-42f4-bcdd-b8ca1acb5152","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:52:18][350536250958229][6364 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-06 15:52:18][350536250958229][6364 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-06 15:52:18][350536250958229][6364 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:54:04][353289765555844][1 ms][INFO] === Request start === [2025-09-06 15:54:04][353289765555844][1 ms][DEBUG] START check_scloud [2025-09-06 15:54:04][353289765555844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:54:04][353289765555844][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 18676 4991 24485344 193324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:54:04][353289765555844][285 ms][DEBUG] targetPkg: running [2025-09-06 15:54:04][353289765555844][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-06 15:54:04][353289765555844][285 ms][DEBUG] START check_boot_completed [2025-09-06 15:54:04][353289765555844][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:54:04][353289765555844][316 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:54:04][353289765555844][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:54:04][353289765555844][378 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:54:04][353289765555844][378 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:54:04][353289765555844][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:54:04][353289765555844][504 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1471\nsuccessfulTxPacketsPerSecond: 0.767327143782491\nretriedTxPackets: 254\nretriedTxPacketsPerSecond: 0.19598398910461892\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1479\nsuccessfulRxPacketsPerSecond: 0.6776395555481739\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:54:04][353289765555844][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:54:04][353289765555844][894 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=291 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 291.680/291.680/291.680/0.000 ms\n [2025-09-06 15:54:04][353289765555844][894 ms][DEBUG] check_internet: online [2025-09-06 15:54:04][353289765555844][894 ms][DEBUG] rawBody.length=1149 [2025-09-06 15:54:04][353289765555844][894 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289765555844\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3182\"}'\'' -e'"" [2025-09-06 15:54:04][353289765555844][895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:54:04][353289765555844][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289765555844\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3182\"}'\'' -e'"" [2025-09-06 15:54:09][353289765555844][5737 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_befb3a8d-ef1b-465f-9a6d-bc87db51ddf0","id":"QR_befb3a8d-ef1b-465f-9a6d-bc87db51ddf0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:54:09][353289765555844][5893 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-06 15:54:09][353289765555844][5893 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-06 15:54:09][353289765555844][5893 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:54:12][353289765555844][0 ms][INFO] === Request start === [2025-09-06 15:54:12][353289765555844][1 ms][DEBUG] START check_scloud [2025-09-06 15:54:12][353289765555844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:54:12][353289765555844][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18676 4991 24617704 205376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:54:12][353289765555844][308 ms][DEBUG] targetPkg: running [2025-09-06 15:54:12][353289765555844][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 15:54:12][353289765555844][308 ms][DEBUG] START check_boot_completed [2025-09-06 15:54:12][353289765555844][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:54:12][353289765555844][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:54:12][353289765555844][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:54:12][353289765555844][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:54:12][353289765555844][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:54:12][353289765555844][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:54:12][353289765555844][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1471\nsuccessfulTxPacketsPerSecond: 0.767327143782491\nretriedTxPackets: 254\nretriedTxPacketsPerSecond: 0.19598398910461892\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1479\nsuccessfulRxPacketsPerSecond: 0.6776395555481739\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:54:12][353289765555844][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:54:13][353289765555844][886 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.362/264.362/264.362/0.000 ms\n [2025-09-06 15:54:13][353289765555844][886 ms][DEBUG] check_internet: online [2025-09-06 15:54:13][353289765555844][886 ms][DEBUG] rawBody.length=1159 [2025-09-06 15:54:13][353289765555844][886 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289765555844\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9375\"}'\'' -e'"" [2025-09-06 15:54:13][353289765555844][886 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:54:13][353289765555844][886 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353289765555844\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9375\"}'\'' -e'"" [2025-09-06 15:54:17][353289765555844][5432 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_423072cc-cdb1-4e07-95d3-6f584c879779","id":"QR_423072cc-cdb1-4e07-95d3-6f584c879779","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:54:17][353289765555844][5588 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-06 15:54:17][353289765555844][5588 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-06 15:54:17][353289765555844][5588 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:54:22][352630607703665][0 ms][INFO] === Request start === [2025-09-06 15:54:22][352630607703665][0 ms][DEBUG] START check_scloud [2025-09-06 15:54:22][352630607703665][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:54:22][352630607703665][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 18676 4991 24745968 216148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:54:22][352630607703665][297 ms][DEBUG] targetPkg: running [2025-09-06 15:54:22][352630607703665][297 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 15:54:22][352630607703665][297 ms][DEBUG] START check_boot_completed [2025-09-06 15:54:22][352630607703665][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:54:22][352630607703665][344 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:54:22][352630607703665][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:54:22][352630607703665][406 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:54:22][352630607703665][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:54:22][352630607703665][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:54:22][352630607703665][531 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1471\nsuccessfulTxPacketsPerSecond: 0.767327143782491\nretriedTxPackets: 254\nretriedTxPacketsPerSecond: 0.19598398910461892\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1479\nsuccessfulRxPacketsPerSecond: 0.6776395555481739\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:54:22][352630607703665][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:54:23][352630607703665][937 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.817/301.817/301.817/0.000 ms\n [2025-09-06 15:54:23][352630607703665][938 ms][DEBUG] check_internet: online [2025-09-06 15:54:23][352630607703665][938 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:54:23][352630607703665][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352630607703665\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7631\"}'\'' -e'"" [2025-09-06 15:54:23][352630607703665][938 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:54:23][352630607703665][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352630607703665\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7631\"}'\'' -e'"" [2025-09-06 15:54:26][352630607703665][4436 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_995fcf45-f0a6-49da-bb50-b3d8f450a7ea","id":"QR_995fcf45-f0a6-49da-bb50-b3d8f450a7ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:54:26][352630607703665][4593 ms][DEBUG] proc_open done in 3654 ms; code=255; res.len=3343 [2025-09-06 15:54:26][352630607703665][4593 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-06 15:54:26][352630607703665][4593 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:54:29][352630607703665][0 ms][INFO] === Request start === [2025-09-06 15:54:29][352630607703665][1 ms][DEBUG] START check_scloud [2025-09-06 15:54:29][352630607703665][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:54:29][352630607703665][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 18676 4991 24878296 228064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:54:29][352630607703665][271 ms][DEBUG] targetPkg: running [2025-09-06 15:54:29][352630607703665][271 ms][DEBUG] END check_scloud in 271 ms [2025-09-06 15:54:29][352630607703665][271 ms][DEBUG] START check_boot_completed [2025-09-06 15:54:29][352630607703665][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:54:29][352630607703665][318 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:54:29][352630607703665][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:54:29][352630607703665][380 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:54:29][352630607703665][380 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:54:29][352630607703665][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 15:54:29][352630607703665][489 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1471\nsuccessfulTxPacketsPerSecond: 0.767327143782491\nretriedTxPackets: 254\nretriedTxPacketsPerSecond: 0.19598398910461892\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1479\nsuccessfulRxPacketsPerSecond: 0.6776395555481739\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 15:54:29][352630607703665][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 15:54:30][352630607703665][896 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.127/305.127/305.127/0.000 ms\n [2025-09-06 15:54:30][352630607703665][896 ms][DEBUG] check_internet: online [2025-09-06 15:54:30][352630607703665][896 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:54:30][352630607703665][896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352630607703665\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4517\"}'\'' -e'"" [2025-09-06 15:54:30][352630607703665][896 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:54:30][352630607703665][897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352630607703665\",\"model\":\"SM-G996B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4517\"}'\'' -e'"" [2025-09-06 15:54:34][352630607703665][5645 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e8e0bf3-3447-4c4c-a529-9ef116f30d77","id":"QR_4e8e0bf3-3447-4c4c-a529-9ef116f30d77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:54:34][352630607703665][5801 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 15:54:34][352630607703665][5801 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 15:54:34][352630607703665][5801 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:57:03][350543334181489][1 ms][INFO] === Request start === [2025-09-06 15:57:03][350543334181489][1 ms][DEBUG] START check_scloud [2025-09-06 15:57:03][350543334181489][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:57:03][350543334181489][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18676 4991 24967412 239300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:57:03][350543334181489][307 ms][DEBUG] targetPkg: running [2025-09-06 15:57:03][350543334181489][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 15:57:03][350543334181489][307 ms][DEBUG] START check_boot_completed [2025-09-06 15:57:03][350543334181489][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:57:03][350543334181489][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:57:03][350543334181489][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:57:04][350543334181489][416 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:57:04][350543334181489][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:57:04][350543334181489][416 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:57:04][350543334181489][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543334181489\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6751\"}'\'' -e'"" [2025-09-06 15:57:04][350543334181489][417 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:57:04][350543334181489][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543334181489\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6751\"}'\'' -e'"" [2025-09-06 15:57:07][350543334181489][4368 ms][DEBUG] proc_open done in 3952 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 15:57:07][350543334181489][4368 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-06 15:57:07][350543334181489][4368 ms][WARN] Detected error: Process with pid 18676 either refused to load frida-agent, or terminated during injectionProcess with pid 18676 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 15:57:07][350543334181489][4368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 15:57:08][350543334181489][4665 ms][DEBUG] SU: done in 297 ms; outsystem 5412 4991 12870388 274096 ep_poll 0 S system_server\n [2025-09-06 15:57:08][350543334181489][4665 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 15:57:08][350543334181489][4806 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 15:57:08][350543334181489][4806 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 15:57:08][350543334181489][4806 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 15:57:08][350543334181489][4931 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 15:57:08][350543334181489][4931 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 15:57:08][350543334181489][5087 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 15:57:10][350543334181489][7102 ms][DEBUG] START check_boot_completed [2025-09-06 15:57:10][350543334181489][7102 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:57:10][350543334181489][7149 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:57:10][350543334181489][7149 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:57:10][350543334181489][7196 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:57:10][350543334181489][7196 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 15:57:13][350543334181489][10211 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 15:57:13][350543334181489][10211 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543334181489\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6751\"}'\'' -e'"" [2025-09-06 15:57:18][350543334181489][14663 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25aa02f3-2030-4ff6-8ce5-6d8ffa8d1941","id":"QR_25aa02f3-2030-4ff6-8ce5-6d8ffa8d1941","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:57:18][350543334181489][14819 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-09-06 15:57:18][350543334181489][14819 ms][DEBUG] END runCmdUntilRes#2 in 4608 ms [2025-09-06 15:57:18][350543334181489][14819 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:57:20][350543334181489][0 ms][INFO] === Request start === [2025-09-06 15:57:20][350543334181489][0 ms][DEBUG] START check_scloud [2025-09-06 15:57:20][350543334181489][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:57:21][350543334181489][236 ms][DEBUG] SU: done in 236 ms; outu0_a118 20173 4991 23745788 124724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:57:21][350543334181489][236 ms][DEBUG] targetPkg: running [2025-09-06 15:57:21][350543334181489][236 ms][DEBUG] END check_scloud in 236 ms [2025-09-06 15:57:21][350543334181489][236 ms][DEBUG] START check_boot_completed [2025-09-06 15:57:21][350543334181489][236 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:57:21][350543334181489][283 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 15:57:21][350543334181489][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:57:21][350543334181489][330 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:57:21][350543334181489][330 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 15:57:21][350543334181489][330 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:57:21][350543334181489][330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543334181489\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6933\"}'\'' -e'"" [2025-09-06 15:57:21][350543334181489][330 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:57:21][350543334181489][330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543334181489\",\"model\":\"SM-A127F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6933\"}'\'' -e'"" [2025-09-06 15:57:26][350543334181489][5750 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66b84bba-1415-4b47-a495-e0ef9d07e143","id":"QR_66b84bba-1415-4b47-a495-e0ef9d07e143","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:57:26][350543334181489][5906 ms][DEBUG] proc_open done in 5577 ms; code=255; res.len=3343 [2025-09-06 15:57:26][350543334181489][5906 ms][DEBUG] END runCmdUntilRes#1 in 5577 ms [2025-09-06 15:57:26][350543334181489][5906 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:59:03][350938280982304][0 ms][INFO] === Request start === [2025-09-06 15:59:03][350938280982304][1 ms][DEBUG] START check_scloud [2025-09-06 15:59:03][350938280982304][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:59:04][350938280982304][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 20173 4991 23792792 138656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:59:04][350938280982304][316 ms][DEBUG] targetPkg: running [2025-09-06 15:59:04][350938280982304][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 15:59:04][350938280982304][316 ms][DEBUG] START check_boot_completed [2025-09-06 15:59:04][350938280982304][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:59:04][350938280982304][363 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 15:59:04][350938280982304][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:59:04][350938280982304][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 15:59:04][350938280982304][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 15:59:04][350938280982304][425 ms][DEBUG] rawBody.length=1150 [2025-09-06 15:59:04][350938280982304][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280982304\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5101\"}'\'' -e'"" [2025-09-06 15:59:04][350938280982304][426 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:59:04][350938280982304][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280982304\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5101\"}'\'' -e'"" [2025-09-06 15:59:09][350938280982304][5455 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_171427ff-cca2-46d1-a607-fc26898a6aac","id":"QR_171427ff-cca2-46d1-a607-fc26898a6aac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:59:09][350938280982304][5611 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-06 15:59:09][350938280982304][5611 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-06 15:59:09][350938280982304][5611 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 15:59:11][350938280982304][1 ms][INFO] === Request start === [2025-09-06 15:59:11][350938280982304][1 ms][DEBUG] START check_scloud [2025-09-06 15:59:11][350938280982304][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 15:59:12][350938280982304][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 20173 4991 23950612 150600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 15:59:12][350938280982304][292 ms][DEBUG] targetPkg: running [2025-09-06 15:59:12][350938280982304][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 15:59:12][350938280982304][292 ms][DEBUG] START check_boot_completed [2025-09-06 15:59:12][350938280982304][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 15:59:12][350938280982304][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 15:59:12][350938280982304][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 15:59:12][350938280982304][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 15:59:12][350938280982304][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 15:59:12][350938280982304][370 ms][DEBUG] rawBody.length=1160 [2025-09-06 15:59:12][350938280982304][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280982304\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3749\"}'\'' -e'"" [2025-09-06 15:59:12][350938280982304][371 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 15:59:12][350938280982304][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280982304\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3749\"}'\'' -e'"" [2025-09-06 15:59:17][350938280982304][5525 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1266ef7a-a41a-45cd-b35e-2dcc46c0c449","id":"QR_1266ef7a-a41a-45cd-b35e-2dcc46c0c449","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 15:59:17][350938280982304][5681 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-06 15:59:17][350938280982304][5681 ms][DEBUG] END runCmdUntilRes#1 in 5310 ms [2025-09-06 15:59:17][350938280982304][5681 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:00:04][356414812030826][0 ms][INFO] === Request start === [2025-09-06 16:00:04][356414812030826][1 ms][DEBUG] START check_scloud [2025-09-06 16:00:04][356414812030826][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:00:04][356414812030826][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 20173 4991 24047956 161680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:00:04][356414812030826][286 ms][DEBUG] targetPkg: running [2025-09-06 16:00:04][356414812030826][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 16:00:04][356414812030826][286 ms][DEBUG] START check_boot_completed [2025-09-06 16:00:04][356414812030826][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:00:04][356414812030826][317 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:00:04][356414812030826][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:00:05][356414812030826][380 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 16:00:05][356414812030826][380 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 16:00:05][356414812030826][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:00:05][356414812030826][489 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1672\nsuccessfulTxPacketsPerSecond: 0.667248711147701\nretriedTxPackets: 306\nretriedTxPacketsPerSecond: 0.17262155711283805\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1651\nsuccessfulRxPacketsPerSecond: 0.5709789966040029\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:00:05][356414812030826][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:00:06][356414812030826][1879 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=297 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 297.063/297.063/297.063/0.000 ms\n [2025-09-06 16:00:06][356414812030826][1880 ms][DEBUG] check_internet: online [2025-09-06 16:00:06][356414812030826][1880 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:00:06][356414812030826][1880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414812030826\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6684\"}'\'' -e'"" [2025-09-06 16:00:06][356414812030826][1880 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:00:06][356414812030826][1880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414812030826\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6684\"}'\'' -e'"" [2025-09-06 16:00:11][356414812030826][6956 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_84021830-6d30-49ae-ac1b-30f10feb94be","id":"QR_84021830-6d30-49ae-ac1b-30f10feb94be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:00:11][356414812030826][7113 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3343 [2025-09-06 16:00:11][356414812030826][7113 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-06 16:00:11][356414812030826][7113 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:00:14][356414812030826][0 ms][INFO] === Request start === [2025-09-06 16:00:14][356414812030826][0 ms][DEBUG] START check_scloud [2025-09-06 16:00:14][356414812030826][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:00:14][356414812030826][253 ms][DEBUG] SU: done in 253 ms; outu0_a118 20173 4991 24208028 172636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:00:14][356414812030826][253 ms][DEBUG] targetPkg: running [2025-09-06 16:00:14][356414812030826][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 16:00:14][356414812030826][254 ms][DEBUG] START check_boot_completed [2025-09-06 16:00:14][356414812030826][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:00:14][356414812030826][300 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:00:14][356414812030826][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:00:14][356414812030826][378 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 16:00:14][356414812030826][378 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 16:00:14][356414812030826][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:00:14][356414812030826][535 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1672\nsuccessfulTxPacketsPerSecond: 0.667248711147701\nretriedTxPackets: 306\nretriedTxPacketsPerSecond: 0.17262155711283805\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1651\nsuccessfulRxPacketsPerSecond: 0.5709789966040029\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:00:14][356414812030826][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:00:15][356414812030826][956 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=320 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 320.215/320.215/320.215/0.000 ms\n [2025-09-06 16:00:15][356414812030826][956 ms][DEBUG] check_internet: online [2025-09-06 16:00:15][356414812030826][957 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:00:15][356414812030826][957 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414812030826\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3141\"}'\'' -e'"" [2025-09-06 16:00:15][356414812030826][957 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:00:15][356414812030826][957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414812030826\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3141\"}'\'' -e'"" [2025-09-06 16:00:21][356414812030826][6923 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0af9da1-3d3d-49d9-90f0-caa43eb14da5","id":"QR_b0af9da1-3d3d-49d9-90f0-caa43eb14da5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:00:21][356414812030826][7080 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-09-06 16:00:21][356414812030826][7080 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-09-06 16:00:21][356414812030826][7080 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:03:03][354136922976638][1 ms][INFO] === Request start === [2025-09-06 16:03:03][354136922976638][1 ms][DEBUG] START check_scloud [2025-09-06 16:03:03][354136922976638][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:03:03][354136922976638][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 20173 4991 24330644 181088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:03:03][354136922976638][307 ms][DEBUG] targetPkg: running [2025-09-06 16:03:03][354136922976638][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 16:03:03][354136922976638][307 ms][DEBUG] START check_boot_completed [2025-09-06 16:03:03][354136922976638][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:03:03][354136922976638][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:03:03][354136922976638][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:03:03][354136922976638][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:03:03][354136922976638][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:03:03][354136922976638][401 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:03:03][354136922976638][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354136922976638\",\"model\":\"SM-X516B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7609\"}'\'' -e'"" [2025-09-06 16:03:03][354136922976638][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:03:03][354136922976638][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354136922976638\",\"model\":\"SM-X516B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7609\"}'\'' -e'"" [2025-09-06 16:03:08][354136922976638][5337 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0bbddfbc-375d-4dff-af6d-ebba4179a437","id":"QR_0bbddfbc-375d-4dff-af6d-ebba4179a437","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:03:08][354136922976638][5493 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-06 16:03:08][354136922976638][5493 ms][DEBUG] END runCmdUntilRes#1 in 5093 ms [2025-09-06 16:03:08][354136922976638][5493 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:03:11][354136922976638][0 ms][INFO] === Request start === [2025-09-06 16:03:11][354136922976638][1 ms][DEBUG] START check_scloud [2025-09-06 16:03:11][354136922976638][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:03:11][354136922976638][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 20173 4991 24466972 188360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:03:11][354136922976638][321 ms][DEBUG] targetPkg: running [2025-09-06 16:03:11][354136922976638][321 ms][DEBUG] END check_scloud in 321 ms [2025-09-06 16:03:11][354136922976638][321 ms][DEBUG] START check_boot_completed [2025-09-06 16:03:11][354136922976638][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:03:11][354136922976638][352 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:03:11][354136922976638][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:03:11][354136922976638][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:03:11][354136922976638][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 16:03:11][354136922976638][400 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:03:11][354136922976638][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354136922976638\",\"model\":\"SM-X516B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5956\"}'\'' -e'"" [2025-09-06 16:03:11][354136922976638][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:03:11][354136922976638][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354136922976638\",\"model\":\"SM-X516B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5956\"}'\'' -e'"" [2025-09-06 16:03:16][354136922976638][5351 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b016c63-43a5-47ff-b20d-64f2264202ce","id":"QR_9b016c63-43a5-47ff-b20d-64f2264202ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:03:16][354136922976638][5508 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 16:03:16][354136922976638][5508 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 16:03:16][354136922976638][5508 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:04:06][352379554540379][0 ms][INFO] === Request start === [2025-09-06 16:04:06][352379554540379][1 ms][DEBUG] START check_scloud [2025-09-06 16:04:06][352379554540379][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:04:07][352379554540379][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 20173 4991 24572636 200744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:04:07][352379554540379][311 ms][DEBUG] targetPkg: running [2025-09-06 16:04:07][352379554540379][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 16:04:07][352379554540379][311 ms][DEBUG] START check_boot_completed [2025-09-06 16:04:07][352379554540379][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:04:07][352379554540379][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:04:07][352379554540379][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:04:07][352379554540379][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 16:04:07][352379554540379][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 16:04:07][352379554540379][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:04:07][352379554540379][576 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1800\nsuccessfulTxPacketsPerSecond: 0.9872201269503382\nretriedTxPackets: 339\nretriedTxPacketsPerSecond: 0.2545176889793841\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1763\nsuccessfulRxPacketsPerSecond: 0.863817611081546\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:04:07][352379554540379][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:04:07][352379554540379][982 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.312/292.312/292.312/0.000 ms\n [2025-09-06 16:04:07][352379554540379][982 ms][DEBUG] check_internet: online [2025-09-06 16:04:07][352379554540379][982 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:04:07][352379554540379][983 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352379554540379\",\"model\":\"SM-A235N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4914\"}'\'' -e'"" [2025-09-06 16:04:07][352379554540379][983 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:04:07][352379554540379][983 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352379554540379\",\"model\":\"SM-A235N\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4914\"}'\'' -e'"" [2025-09-06 16:04:12][352379554540379][5419 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a42c0ff-5e0c-4df7-aeca-ed9b0ad5173f","id":"QR_0a42c0ff-5e0c-4df7-aeca-ed9b0ad5173f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:04:12][352379554540379][5575 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-09-06 16:04:12][352379554540379][5575 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-09-06 16:04:12][352379554540379][5575 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:05:03][350536251129143][0 ms][INFO] === Request start === [2025-09-06 16:05:03][350536251129143][1 ms][DEBUG] START check_scloud [2025-09-06 16:05:03][350536251129143][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:05:03][350536251129143][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 20173 4991 24721344 198720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:05:03][350536251129143][304 ms][DEBUG] targetPkg: running [2025-09-06 16:05:03][350536251129143][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 16:05:03][350536251129143][304 ms][DEBUG] START check_boot_completed [2025-09-06 16:05:03][350536251129143][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:05:03][350536251129143][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:05:03][350536251129143][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:05:03][350536251129143][414 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 16:05:03][350536251129143][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 16:05:03][350536251129143][414 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:05:03][350536251129143][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536251129143\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3137\"}'\'' -e'"" [2025-09-06 16:05:03][350536251129143][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:05:03][350536251129143][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536251129143\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3137\"}'\'' -e'"" [2025-09-06 16:05:08][350536251129143][4975 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05803e69-36dc-4e15-b266-91e453ba434e","id":"QR_05803e69-36dc-4e15-b266-91e453ba434e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:05:08][350536251129143][5131 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-06 16:05:08][350536251129143][5131 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-09-06 16:05:08][350536251129143][5131 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:05:11][350536251129143][1 ms][INFO] === Request start === [2025-09-06 16:05:11][350536251129143][1 ms][DEBUG] START check_scloud [2025-09-06 16:05:11][350536251129143][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:05:11][350536251129143][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 20173 4991 24874184 210508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:05:11][350536251129143][299 ms][DEBUG] targetPkg: running [2025-09-06 16:05:11][350536251129143][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 16:05:11][350536251129143][299 ms][DEBUG] START check_boot_completed [2025-09-06 16:05:11][350536251129143][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:05:11][350536251129143][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:05:11][350536251129143][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:05:11][350536251129143][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:05:11][350536251129143][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:05:11][350536251129143][393 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:05:11][350536251129143][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536251129143\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2947\"}'\'' -e'"" [2025-09-06 16:05:11][350536251129143][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:05:11][350536251129143][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536251129143\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2947\"}'\'' -e'"" [2025-09-06 16:05:17][350536251129143][6032 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4e2234b-2c67-4999-8bc1-4842875d9bc9","id":"QR_b4e2234b-2c67-4999-8bc1-4842875d9bc9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:05:17][350536251129143][6188 ms][DEBUG] proc_open done in 5795 ms; code=255; res.len=3343 [2025-09-06 16:05:17][350536251129143][6188 ms][DEBUG] END runCmdUntilRes#1 in 5795 ms [2025-09-06 16:05:17][350536251129143][6188 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:07:03][352838653298759][0 ms][INFO] === Request start === [2025-09-06 16:07:03][352838653298759][1 ms][DEBUG] START check_scloud [2025-09-06 16:07:03][352838653298759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:07:03][352838653298759][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 20173 4991 25016716 220156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:07:03][352838653298759][278 ms][DEBUG] targetPkg: running [2025-09-06 16:07:03][352838653298759][278 ms][DEBUG] END check_scloud in 278 ms [2025-09-06 16:07:03][352838653298759][278 ms][DEBUG] START check_boot_completed [2025-09-06 16:07:03][352838653298759][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:07:03][352838653298759][324 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:07:03][352838653298759][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:07:03][352838653298759][387 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 16:07:03][352838653298759][387 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 16:07:03][352838653298759][387 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:07:03][352838653298759][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838653298759\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4677\"}'\'' -e'"" [2025-09-06 16:07:03][352838653298759][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:07:03][352838653298759][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838653298759\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4677\"}'\'' -e'"" [2025-09-06 16:07:08][352838653298759][5120 ms][DEBUG] proc_open done in 4733 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 16:07:08][352838653298759][5120 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-09-06 16:07:08][352838653298759][5120 ms][WARN] Detected error: Process with pid 20173 either refused to load frida-agent, or terminated during injectionProcess with pid 20173 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 16:07:08][352838653298759][5120 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 16:07:08][352838653298759][5370 ms][DEBUG] SU: done in 250 ms; outsystem 5412 4991 12806912 240756 ep_poll 0 S system_server\n [2025-09-06 16:07:08][352838653298759][5370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 16:07:08][352838653298759][5511 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 16:07:08][352838653298759][5511 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 16:07:08][352838653298759][5511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 16:07:08][352838653298759][5651 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 16:07:08][352838653298759][5652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 16:07:08][352838653298759][5824 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 16:07:10][352838653298759][7838 ms][DEBUG] START check_boot_completed [2025-09-06 16:07:10][352838653298759][7838 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:07:11][352838653298759][7885 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:07:11][352838653298759][7885 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:07:11][352838653298759][7932 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:07:11][352838653298759][7932 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 16:07:14][352838653298759][10947 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 16:07:14][352838653298759][10947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838653298759\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4677\"}'\'' -e'"" [2025-09-06 16:07:18][352838653298759][15508 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d99e27c1-919d-4bc5-b5d1-7ef180293940","id":"QR_d99e27c1-919d-4bc5-b5d1-7ef180293940","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:07:18][352838653298759][15664 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-06 16:07:18][352838653298759][15664 ms][DEBUG] END runCmdUntilRes#2 in 4718 ms [2025-09-06 16:07:18][352838653298759][15665 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:07:21][352838653298759][1 ms][INFO] === Request start === [2025-09-06 16:07:21][352838653298759][1 ms][DEBUG] START check_scloud [2025-09-06 16:07:21][352838653298759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:07:21][352838653298759][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 21936 4991 23678080 124448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:07:21][352838653298759][290 ms][DEBUG] targetPkg: running [2025-09-06 16:07:21][352838653298759][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-06 16:07:21][352838653298759][290 ms][DEBUG] START check_boot_completed [2025-09-06 16:07:21][352838653298759][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:07:21][352838653298759][337 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:07:21][352838653298759][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:07:21][352838653298759][431 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 16:07:21][352838653298759][431 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 16:07:21][352838653298759][431 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:07:21][352838653298759][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838653298759\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5944\"}'\'' -e'"" [2025-09-06 16:07:21][352838653298759][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:07:21][352838653298759][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838653298759\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5944\"}'\'' -e'"" [2025-09-06 16:07:26][352838653298759][5351 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5742c432-928e-42f0-9b56-84dbda13ba4b","id":"QR_5742c432-928e-42f0-9b56-84dbda13ba4b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:07:26][352838653298759][5508 ms][DEBUG] proc_open done in 5076 ms; code=255; res.len=3343 [2025-09-06 16:07:26][352838653298759][5508 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-09-06 16:07:26][352838653298759][5508 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:10:03][353628421934234][1 ms][INFO] === Request start === [2025-09-06 16:10:03][353628421934234][1 ms][DEBUG] START check_scloud [2025-09-06 16:10:03][353628421934234][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:10:04][353628421934234][276 ms][DEBUG] SU: done in 274 ms; outu0_a118 21936 4991 23714604 137912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:10:04][353628421934234][276 ms][DEBUG] targetPkg: running [2025-09-06 16:10:04][353628421934234][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-06 16:10:04][353628421934234][276 ms][DEBUG] START check_boot_completed [2025-09-06 16:10:04][353628421934234][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:10:04][353628421934234][323 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:10:04][353628421934234][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:10:04][353628421934234][416 ms][DEBUG] SU: done in 93 ms; out [2025-09-06 16:10:04][353628421934234][416 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 16:10:04][353628421934234][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:10:04][353628421934234][541 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1975\nsuccessfulTxPacketsPerSecond: 0.579652539706199\nretriedTxPackets: 381\nretriedTxPacketsPerSecond: 0.13911660952948776\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1915\nsuccessfulRxPacketsPerSecond: 0.50346963448767\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:10:04][353628421934234][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:10:05][353628421934234][2025 ms][DEBUG] SU: done in 1484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.906/294.906/294.906/0.000 ms\n [2025-09-06 16:10:05][353628421934234][2025 ms][DEBUG] check_internet: online [2025-09-06 16:10:05][353628421934234][2026 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:10:05][353628421934234][2026 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628421934234\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7048\"}'\'' -e'"" [2025-09-06 16:10:05][353628421934234][2026 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:10:05][353628421934234][2026 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628421934234\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7048\"}'\'' -e'"" [2025-09-06 16:10:09][353628421934234][6040 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_603829c8-4fc4-4955-9757-68535e75dbbf","id":"QR_603829c8-4fc4-4955-9757-68535e75dbbf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:10:10][353628421934234][6196 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-09-06 16:10:10][353628421934234][6196 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-09-06 16:10:10][353628421934234][6196 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:10:12][353628421934234][0 ms][INFO] === Request start === [2025-09-06 16:10:12][353628421934234][1 ms][DEBUG] START check_scloud [2025-09-06 16:10:12][353628421934234][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:10:12][353628421934234][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 21936 4991 23848372 149520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:10:12][353628421934234][294 ms][DEBUG] targetPkg: running [2025-09-06 16:10:12][353628421934234][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-06 16:10:12][353628421934234][294 ms][DEBUG] START check_boot_completed [2025-09-06 16:10:12][353628421934234][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:10:12][353628421934234][339 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 16:10:12][353628421934234][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:10:12][353628421934234][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:10:12][353628421934234][386 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 16:10:12][353628421934234][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:10:12][353628421934234][511 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1975\nsuccessfulTxPacketsPerSecond: 0.579652539706199\nretriedTxPackets: 381\nretriedTxPacketsPerSecond: 0.13911660952948776\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1915\nsuccessfulRxPacketsPerSecond: 0.50346963448767\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:10:12][353628421934234][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:10:13][353628421934234][839 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.536/225.536/225.536/0.000 ms\n [2025-09-06 16:10:13][353628421934234][839 ms][DEBUG] check_internet: online [2025-09-06 16:10:13][353628421934234][839 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:10:13][353628421934234][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628421934234\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3963\"}'\'' -e'"" [2025-09-06 16:10:13][353628421934234][839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:10:13][353628421934234][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628421934234\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3963\"}'\'' -e'"" [2025-09-06 16:10:18][353628421934234][5978 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0041cb70-08ad-4185-813f-2bf1356fe60e","id":"QR_0041cb70-08ad-4185-813f-2bf1356fe60e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:10:18][353628421934234][6134 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-06 16:10:18][353628421934234][6134 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-06 16:10:18][353628421934234][6135 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:11:04][352549936551365][0 ms][INFO] === Request start === [2025-09-06 16:11:04][352549936551365][1 ms][DEBUG] START check_scloud [2025-09-06 16:11:04][352549936551365][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:11:04][352549936551365][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 21936 4991 23961040 160748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:11:04][352549936551365][297 ms][DEBUG] targetPkg: running [2025-09-06 16:11:04][352549936551365][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 16:11:04][352549936551365][297 ms][DEBUG] START check_boot_completed [2025-09-06 16:11:04][352549936551365][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:11:04][352549936551365][342 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 16:11:04][352549936551365][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:11:04][352549936551365][405 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 16:11:04][352549936551365][405 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-06 16:11:04][352549936551365][405 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:11:04][352549936551365][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936551365\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5410\"}'\'' -e'"" [2025-09-06 16:11:04][352549936551365][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:11:04][352549936551365][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936551365\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5410\"}'\'' -e'"" [2025-09-06 16:11:07][352549936551365][3904 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6267b01-c605-44cf-9602-e09231e74192","id":"QR_a6267b01-c605-44cf-9602-e09231e74192","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:11:08][352549936551365][4060 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-06 16:11:08][352549936551365][4060 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-06 16:11:08][352549936551365][4060 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:11:10][352549936551365][0 ms][INFO] === Request start === [2025-09-06 16:11:10][352549936551365][1 ms][DEBUG] START check_scloud [2025-09-06 16:11:10][352549936551365][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:11:10][352549936551365][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 21936 4991 24132312 171360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:11:10][352549936551365][293 ms][DEBUG] targetPkg: running [2025-09-06 16:11:10][352549936551365][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-06 16:11:10][352549936551365][293 ms][DEBUG] START check_boot_completed [2025-09-06 16:11:10][352549936551365][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:11:10][352549936551365][324 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:11:10][352549936551365][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:11:11][352549936551365][387 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 16:11:11][352549936551365][387 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 16:11:11][352549936551365][387 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:11:11][352549936551365][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936551365\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7845\"}'\'' -e'"" [2025-09-06 16:11:11][352549936551365][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:11:11][352549936551365][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936551365\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7845\"}'\'' -e'"" [2025-09-06 16:11:15][352549936551365][5136 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47fb2b8c-b1e7-4dac-87bd-f14ceada71c9","id":"QR_47fb2b8c-b1e7-4dac-87bd-f14ceada71c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:11:15][352549936551365][5292 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 16:11:15][352549936551365][5292 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-09-06 16:11:15][352549936551365][5292 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:12:04][357556770891679][1 ms][INFO] === Request start === [2025-09-06 16:12:04][357556770891679][1 ms][DEBUG] START check_scloud [2025-09-06 16:12:04][357556770891679][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:12:04][357556770891679][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 21936 4991 24235932 183468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:12:04][357556770891679][297 ms][DEBUG] targetPkg: running [2025-09-06 16:12:04][357556770891679][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 16:12:04][357556770891679][297 ms][DEBUG] START check_boot_completed [2025-09-06 16:12:04][357556770891679][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:12:05][357556770891679][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:12:05][357556770891679][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:12:05][357556770891679][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:12:05][357556770891679][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:12:05][357556770891679][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:12:05][357556770891679][501 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2129\nsuccessfulTxPacketsPerSecond: 0.5111931380619805\nretriedTxPackets: 416\nretriedTxPacketsPerSecond: 0.11618025865045012\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2052\nsuccessfulRxPacketsPerSecond: 0.45476272671747614\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:12:05][357556770891679][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:12:05][357556770891679][922 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=306 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 306.030/306.030/306.030/0.000 ms\n [2025-09-06 16:12:05][357556770891679][922 ms][DEBUG] check_internet: online [2025-09-06 16:12:05][357556770891679][922 ms][DEBUG] rawBody.length=1159 [2025-09-06 16:12:05][357556770891679][922 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357556770891679\",\"model\":\"SM-T735\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7525\"}'\'' -e'"" [2025-09-06 16:12:05][357556770891679][922 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:12:05][357556770891679][922 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357556770891679\",\"model\":\"SM-T735\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7525\"}'\'' -e'"" [2025-09-06 16:12:11][357556770891679][6483 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77200a6c-a0db-4af6-bacb-bb68632d51eb","id":"QR_77200a6c-a0db-4af6-bacb-bb68632d51eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:12:11][357556770891679][6639 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-06 16:12:11][357556770891679][6639 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-06 16:12:11][357556770891679][6639 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:12:14][357556770891679][0 ms][INFO] === Request start === [2025-09-06 16:12:14][357556770891679][1 ms][DEBUG] START check_scloud [2025-09-06 16:12:14][357556770891679][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:12:15][357556770891679][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 21936 4991 24394916 192260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:12:15][357556770891679][253 ms][DEBUG] targetPkg: running [2025-09-06 16:12:15][357556770891679][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-06 16:12:15][357556770891679][253 ms][DEBUG] START check_boot_completed [2025-09-06 16:12:15][357556770891679][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:12:15][357556770891679][282 ms][DEBUG] ADB: done in 29 ms; out [2025-09-06 16:12:15][357556770891679][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:12:15][357556770891679][329 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:12:15][357556770891679][329 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 16:12:15][357556770891679][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:12:15][357556770891679][454 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2129\nsuccessfulTxPacketsPerSecond: 0.5111931380619805\nretriedTxPackets: 416\nretriedTxPacketsPerSecond: 0.11618025865045012\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2052\nsuccessfulRxPacketsPerSecond: 0.45476272671747614\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:12:15][357556770891679][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:12:15][357556770891679][923 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=313 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 313.784/313.784/313.784/0.000 ms\n [2025-09-06 16:12:15][357556770891679][923 ms][DEBUG] check_internet: online [2025-09-06 16:12:15][357556770891679][923 ms][DEBUG] rawBody.length=1149 [2025-09-06 16:12:15][357556770891679][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357556770891679\",\"model\":\"SM-T735\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5176\"}'\'' -e'"" [2025-09-06 16:12:15][357556770891679][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:12:15][357556770891679][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357556770891679\",\"model\":\"SM-T735\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5176\"}'\'' -e'"" [2025-09-06 16:12:19][357556770891679][4875 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c20b601-f786-42c2-af97-217d90eae1fe","id":"QR_0c20b601-f786-42c2-af97-217d90eae1fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:12:19][357556770891679][5031 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-06 16:12:19][357556770891679][5031 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-06 16:12:19][357556770891679][5031 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:12:23][357567914715567][0 ms][INFO] === Request start === [2025-09-06 16:12:23][357567914715567][1 ms][DEBUG] START check_scloud [2025-09-06 16:12:23][357567914715567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:12:23][357567914715567][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 21936 4991 24543532 204036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:12:23][357567914715567][294 ms][DEBUG] targetPkg: running [2025-09-06 16:12:23][357567914715567][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-06 16:12:23][357567914715567][294 ms][DEBUG] START check_boot_completed [2025-09-06 16:12:23][357567914715567][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:12:23][357567914715567][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:12:23][357567914715567][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:12:23][357567914715567][403 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 16:12:23][357567914715567][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 16:12:23][357567914715567][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:12:23][357567914715567][528 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2129\nsuccessfulTxPacketsPerSecond: 0.5111931380619805\nretriedTxPackets: 416\nretriedTxPacketsPerSecond: 0.11618025865045012\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2052\nsuccessfulRxPacketsPerSecond: 0.45476272671747614\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:12:23][357567914715567][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:12:24][357567914715567][934 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.456/298.456/298.456/0.000 ms\n [2025-09-06 16:12:24][357567914715567][934 ms][DEBUG] check_internet: online [2025-09-06 16:12:24][357567914715567][934 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:12:24][357567914715567][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567914715567\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7935\"}'\'' -e'"" [2025-09-06 16:12:24][357567914715567][934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:12:24][357567914715567][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567914715567\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7935\"}'\'' -e'"" [2025-09-06 16:12:28][357567914715567][5776 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6aef8763-caef-4ea2-9005-89890a521ef3","id":"QR_6aef8763-caef-4ea2-9005-89890a521ef3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:12:29][357567914715567][5933 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-09-06 16:12:29][357567914715567][5933 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-06 16:12:29][357567914715567][5933 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:12:32][357567914715567][0 ms][INFO] === Request start === [2025-09-06 16:12:32][357567914715567][1 ms][DEBUG] START check_scloud [2025-09-06 16:12:32][357567914715567][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:12:32][357567914715567][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 21936 4991 24660368 214748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:12:32][357567914715567][287 ms][DEBUG] targetPkg: running [2025-09-06 16:12:32][357567914715567][287 ms][DEBUG] END check_scloud in 287 ms [2025-09-06 16:12:32][357567914715567][287 ms][DEBUG] START check_boot_completed [2025-09-06 16:12:32][357567914715567][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:12:32][357567914715567][333 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:12:32][357567914715567][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:12:32][357567914715567][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:12:32][357567914715567][380 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:12:32][357567914715567][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:12:32][357567914715567][489 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2129\nsuccessfulTxPacketsPerSecond: 0.5111931380619805\nretriedTxPackets: 416\nretriedTxPacketsPerSecond: 0.11618025865045012\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2052\nsuccessfulRxPacketsPerSecond: 0.45476272671747614\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:12:32][357567914715567][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:12:33][357567914715567][927 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=333 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 333.739/333.739/333.739/0.000 ms\n [2025-09-06 16:12:33][357567914715567][927 ms][DEBUG] check_internet: online [2025-09-06 16:12:33][357567914715567][927 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:12:33][357567914715567][927 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567914715567\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5821\"}'\'' -e'"" [2025-09-06 16:12:33][357567914715567][927 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:12:33][357567914715567][927 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567914715567\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5821\"}'\'' -e'"" [2025-09-06 16:12:36][357567914715567][4426 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b308dcf8-a50f-4da7-ad1f-ff2cd0eeca2a","id":"QR_b308dcf8-a50f-4da7-ad1f-ff2cd0eeca2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:12:37][357567914715567][4582 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-06 16:12:37][357567914715567][4582 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-06 16:12:37][357567914715567][4582 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:13:03][353079703544897][0 ms][INFO] === Request start === [2025-09-06 16:13:03][353079703544897][1 ms][DEBUG] START check_scloud [2025-09-06 16:13:03][353079703544897][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:13:03][353079703544897][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 21936 4991 24745388 227244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:13:03][353079703544897][310 ms][DEBUG] targetPkg: running [2025-09-06 16:13:03][353079703544897][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 16:13:03][353079703544897][310 ms][DEBUG] START check_boot_completed [2025-09-06 16:13:03][353079703544897][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:13:03][353079703544897][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:13:03][353079703544897][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:13:03][353079703544897][405 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 16:13:03][353079703544897][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 16:13:03][353079703544897][405 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:13:03][353079703544897][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079703544897\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6328\"}'\'' -e'"" [2025-09-06 16:13:03][353079703544897][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:13:03][353079703544897][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079703544897\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6328\"}'\'' -e'"" [2025-09-06 16:13:06][353079703544897][3652 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 16:13:07][353079703544897][3808 ms][DEBUG] proc_open done in 3403 ms; code=255; res.len=115 [2025-09-06 16:13:07][353079703544897][3808 ms][DEBUG] END runCmdUntilRes#1 in 3403 ms [2025-09-06 16:13:07][353079703544897][3808 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 16:13:07][][0 ms][INFO] === Request start === [2025-09-06 16:13:07][][1 ms][DEBUG] START check_scloud [2025-09-06 16:13:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:13:07][][259 ms][DEBUG] SU: done in 259 ms; outu0_a118 21936 4991 24900276 239108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:13:07][][259 ms][DEBUG] targetPkg: running [2025-09-06 16:13:07][][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-06 16:13:07][][260 ms][DEBUG] START check_boot_completed [2025-09-06 16:13:07][][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:13:07][][306 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:13:07][][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:13:07][][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:13:07][][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:13:07][][353 ms][DEBUG] rawBody.length=1131 [2025-09-06 16:13:07][][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CWA0PRMMB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5481\"}'\'' -e'"" [2025-09-06 16:13:07][][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:13:07][][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CWA0PRMMB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5481\"}'\'' -e'"" [2025-09-06 16:13:11][][4118 ms][DEBUG] proc_open done in 3765 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 16:13:11][][4118 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-09-06 16:13:11][][4118 ms][WARN] Detected error: Process with pid 21936 either refused to load frida-agent, or terminated during injectionProcess with pid 21936 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 16:13:11][][4118 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 16:13:11][][4415 ms][DEBUG] SU: done in 297 ms; outsystem 5412 4991 12776696 201960 ep_poll 0 S system_server\n [2025-09-06 16:13:11][][4415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 16:13:11][][4555 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 16:13:11][][4555 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 16:13:11][][4555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 16:13:12][][4680 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 16:13:12][][4680 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 16:13:12][][4821 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 16:13:14][][6836 ms][DEBUG] START check_boot_completed [2025-09-06 16:13:14][][6836 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:13:14][][6883 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:13:14][][6883 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:13:14][][6945 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 16:13:14][][6945 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 16:13:17][][9960 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 16:13:17][][9960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CWA0PRMMB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5481\"}'\'' -e'"" [2025-09-06 16:13:21][][14162 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 16:13:21][][14318 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=115 [2025-09-06 16:13:21][][14319 ms][DEBUG] END runCmdUntilRes#2 in 4359 ms [2025-09-06 16:13:21][][14319 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 16:13:23][353079703544897][0 ms][INFO] === Request start === [2025-09-06 16:13:23][353079703544897][1 ms][DEBUG] START check_scloud [2025-09-06 16:13:23][353079703544897][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:13:23][353079703544897][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 23347 4991 23703772 123904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:13:23][353079703544897][267 ms][DEBUG] targetPkg: running [2025-09-06 16:13:23][353079703544897][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-06 16:13:23][353079703544897][267 ms][DEBUG] START check_boot_completed [2025-09-06 16:13:23][353079703544897][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:13:23][353079703544897][313 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:13:23][353079703544897][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:13:23][353079703544897][376 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 16:13:23][353079703544897][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 16:13:23][353079703544897][376 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:13:23][353079703544897][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079703544897\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4409\"}'\'' -e'"" [2025-09-06 16:13:23][353079703544897][376 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:13:23][353079703544897][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079703544897\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4409\"}'\'' -e'"" [2025-09-06 16:13:28][353079703544897][5234 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37893eca-552a-482f-a306-17c3c241d245","id":"QR_37893eca-552a-482f-a306-17c3c241d245","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:13:28][353079703544897][5390 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 16:13:28][353079703544897][5390 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 16:13:28][353079703544897][5390 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:15:03][351240643276907][1 ms][INFO] === Request start === [2025-09-06 16:15:03][351240643276907][1 ms][DEBUG] START check_scloud [2025-09-06 16:15:03][351240643276907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:15:03][351240643276907][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 23347 4991 23770264 137264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:15:03][351240643276907][271 ms][DEBUG] targetPkg: running [2025-09-06 16:15:03][351240643276907][271 ms][DEBUG] END check_scloud in 270 ms [2025-09-06 16:15:03][351240643276907][271 ms][DEBUG] START check_boot_completed [2025-09-06 16:15:03][351240643276907][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:15:03][351240643276907][318 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:15:03][351240643276907][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:15:03][351240643276907][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:15:03][351240643276907][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:15:03][351240643276907][364 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:15:03][351240643276907][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643276907\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8593\"}'\'' -e'"" [2025-09-06 16:15:03][351240643276907][365 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:15:03][351240643276907][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643276907\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8593\"}'\'' -e'"" [2025-09-06 16:15:08][351240643276907][5020 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_526becc5-9939-421a-81a4-780af8b434d0","id":"QR_526becc5-9939-421a-81a4-780af8b434d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:15:08][351240643276907][5176 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-06 16:15:08][351240643276907][5176 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-06 16:15:08][351240643276907][5176 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:15:10][351240643276907][0 ms][INFO] === Request start === [2025-09-06 16:15:10][351240643276907][1 ms][DEBUG] START check_scloud [2025-09-06 16:15:10][351240643276907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:15:11][351240643276907][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 23347 4991 23925024 149004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:15:11][351240643276907][269 ms][DEBUG] targetPkg: running [2025-09-06 16:15:11][351240643276907][269 ms][DEBUG] END check_scloud in 269 ms [2025-09-06 16:15:11][351240643276907][269 ms][DEBUG] START check_boot_completed [2025-09-06 16:15:11][351240643276907][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:15:11][351240643276907][316 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:15:11][351240643276907][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:15:11][351240643276907][394 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 16:15:11][351240643276907][394 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 16:15:11][351240643276907][394 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:15:11][351240643276907][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643276907\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2739\"}'\'' -e'"" [2025-09-06 16:15:11][351240643276907][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:15:11][351240643276907][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643276907\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2739\"}'\'' -e'"" [2025-09-06 16:15:16][351240643276907][5877 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03ee4c30-d48a-48ba-a82f-d355c1d2f30c","id":"QR_03ee4c30-d48a-48ba-a82f-d355c1d2f30c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:15:16][351240643276907][6033 ms][DEBUG] proc_open done in 5639 ms; code=255; res.len=3343 [2025-09-06 16:15:16][351240643276907][6033 ms][DEBUG] END runCmdUntilRes#1 in 5639 ms [2025-09-06 16:15:16][351240643276907][6033 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:16:04][355707114403844][0 ms][INFO] === Request start === [2025-09-06 16:16:04][355707114403844][1 ms][DEBUG] START check_scloud [2025-09-06 16:16:04][355707114403844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:16:05][355707114403844][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 23347 4991 24023508 160248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:16:05][355707114403844][294 ms][DEBUG] targetPkg: running [2025-09-06 16:16:05][355707114403844][294 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 16:16:05][355707114403844][294 ms][DEBUG] START check_boot_completed [2025-09-06 16:16:05][355707114403844][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:16:05][355707114403844][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:16:05][355707114403844][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:16:05][355707114403844][389 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 16:16:05][355707114403844][389 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 16:16:05][355707114403844][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:16:05][355707114403844][513 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2280\nsuccessfulTxPacketsPerSecond: 1.384571653875425\nretriedTxPackets: 450\nretriedTxPacketsPerSecond: 0.31175785583949966\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2178\nsuccessfulRxPacketsPerSecond: 1.1553379363463812\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:16:05][355707114403844][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:16:06][355707114403844][1905 ms][DEBUG] SU: done in 1392 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.651/299.651/299.651/0.000 ms\n [2025-09-06 16:16:06][355707114403844][1905 ms][DEBUG] check_internet: online [2025-09-06 16:16:06][355707114403844][1905 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:16:06][355707114403844][1905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114403844\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9597\"}'\'' -e'"" [2025-09-06 16:16:06][355707114403844][1905 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:16:06][355707114403844][1905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114403844\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9597\"}'\'' -e'"" [2025-09-06 16:16:11][355707114403844][6558 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4637054f-4897-482b-b0f9-2d5ff3467495","id":"QR_4637054f-4897-482b-b0f9-2d5ff3467495","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:16:11][355707114403844][6714 ms][DEBUG] proc_open done in 4808 ms; code=255; res.len=3343 [2025-09-06 16:16:11][355707114403844][6714 ms][DEBUG] END runCmdUntilRes#1 in 4809 ms [2025-09-06 16:16:11][355707114403844][6714 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:16:15][355707114403844][0 ms][INFO] === Request start === [2025-09-06 16:16:15][355707114403844][1 ms][DEBUG] START check_scloud [2025-09-06 16:16:15][355707114403844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:16:15][355707114403844][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 23347 4991 24159900 171080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:16:15][355707114403844][314 ms][DEBUG] targetPkg: running [2025-09-06 16:16:15][355707114403844][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 16:16:15][355707114403844][315 ms][DEBUG] START check_boot_completed [2025-09-06 16:16:15][355707114403844][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:16:15][355707114403844][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:16:15][355707114403844][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:16:15][355707114403844][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:16:15][355707114403844][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:16:15][355707114403844][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:16:15][355707114403844][517 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2280\nsuccessfulTxPacketsPerSecond: 1.384571653875425\nretriedTxPackets: 450\nretriedTxPacketsPerSecond: 0.31175785583949966\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2178\nsuccessfulRxPacketsPerSecond: 1.1553379363463812\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:16:15][355707114403844][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:16:16][355707114403844][954 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.555/301.555/301.555/0.000 ms\n [2025-09-06 16:16:16][355707114403844][955 ms][DEBUG] check_internet: online [2025-09-06 16:16:16][355707114403844][955 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:16:16][355707114403844][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114403844\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4413\"}'\'' -e'"" [2025-09-06 16:16:16][355707114403844][955 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:16:16][355707114403844][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114403844\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4413\"}'\'' -e'"" [2025-09-06 16:16:19][355707114403844][4703 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9427595-fb7e-4d1b-a015-ceea4214545e","id":"QR_a9427595-fb7e-4d1b-a015-ceea4214545e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:16:19][355707114403844][4860 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-09-06 16:16:19][355707114403844][4860 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-06 16:16:19][355707114403844][4860 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:20:03][353499866104828][1 ms][INFO] === Request start === [2025-09-06 16:20:03][353499866104828][1 ms][DEBUG] START check_scloud [2025-09-06 16:20:03][353499866104828][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:20:04][353499866104828][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 23347 4991 24304404 183480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:20:04][353499866104828][271 ms][DEBUG] targetPkg: running [2025-09-06 16:20:04][353499866104828][272 ms][DEBUG] END check_scloud in 270 ms [2025-09-06 16:20:04][353499866104828][272 ms][DEBUG] START check_boot_completed [2025-09-06 16:20:04][353499866104828][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:20:04][353499866104828][302 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:20:04][353499866104828][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:20:04][353499866104828][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:20:04][353499866104828][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 16:20:04][353499866104828][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:20:04][353499866104828][459 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2523\nsuccessfulTxPacketsPerSecond: 0.15180568871844038\nretriedTxPackets: 512\nretriedTxPacketsPerSecond: 0.03195909236177692\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2385\nsuccessfulRxPacketsPerSecond: 0.13582614253755193\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:20:04][353499866104828][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:20:04][353499866104828][913 ms][DEBUG] SU: done in 454 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=344 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 344.938/344.938/344.938/0.000 ms\n [2025-09-06 16:20:04][353499866104828][913 ms][DEBUG] check_internet: online [2025-09-06 16:20:04][353499866104828][913 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:20:04][353499866104828][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499866104828\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7895\"}'\'' -e'"" [2025-09-06 16:20:04][353499866104828][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:20:04][353499866104828][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499866104828\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7895\"}'\'' -e'"" [2025-09-06 16:20:09][353499866104828][6067 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_714961d3-74a3-46fa-b413-1e355cd355c6","id":"QR_714961d3-74a3-46fa-b413-1e355cd355c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:20:10][353499866104828][6223 ms][DEBUG] proc_open done in 5309 ms; code=255; res.len=3343 [2025-09-06 16:20:10][353499866104828][6223 ms][DEBUG] END runCmdUntilRes#1 in 5309 ms [2025-09-06 16:20:10][353499866104828][6223 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:20:12][353499866104828][0 ms][INFO] === Request start === [2025-09-06 16:20:12][353499866104828][1 ms][DEBUG] START check_scloud [2025-09-06 16:20:12][353499866104828][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:20:12][353499866104828][251 ms][DEBUG] SU: done in 251 ms; outu0_a118 23347 4991 24485916 194708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:20:12][353499866104828][252 ms][DEBUG] targetPkg: running [2025-09-06 16:20:12][353499866104828][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-06 16:20:12][353499866104828][252 ms][DEBUG] START check_boot_completed [2025-09-06 16:20:12][353499866104828][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:20:12][353499866104828][298 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:20:12][353499866104828][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:20:12][353499866104828][361 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 16:20:12][353499866104828][361 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 16:20:12][353499866104828][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:20:13][353499866104828][486 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2523\nsuccessfulTxPacketsPerSecond: 0.15180568871844038\nretriedTxPackets: 512\nretriedTxPacketsPerSecond: 0.03195909236177692\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2385\nsuccessfulRxPacketsPerSecond: 0.13582614253755193\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:20:13][353499866104828][486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:20:13][353499866104828][1298 ms][DEBUG] SU: done in 812 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=404 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 404.684/404.684/404.684/0.000 ms\n [2025-09-06 16:20:13][353499866104828][1298 ms][DEBUG] check_internet: online [2025-09-06 16:20:13][353499866104828][1298 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:20:13][353499866104828][1298 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499866104828\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6720\"}'\'' -e'"" [2025-09-06 16:20:13][353499866104828][1298 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:20:13][353499866104828][1299 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499866104828\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6720\"}'\'' -e'"" [2025-09-06 16:20:19][353499866104828][6547 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd41e492-0182-41c0-8a79-ea19173fde80","id":"QR_cd41e492-0182-41c0-8a79-ea19173fde80","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:20:19][353499866104828][6703 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-06 16:20:19][353499866104828][6703 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-09-06 16:20:19][353499866104828][6703 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:22:03][352978604867482][0 ms][INFO] === Request start === [2025-09-06 16:22:03][352978604867482][0 ms][DEBUG] START check_scloud [2025-09-06 16:22:03][352978604867482][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:22:03][352978604867482][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 23347 4991 24601180 207200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:22:03][352978604867482][303 ms][DEBUG] targetPkg: running [2025-09-06 16:22:03][352978604867482][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 16:22:03][352978604867482][303 ms][DEBUG] START check_boot_completed [2025-09-06 16:22:03][352978604867482][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:22:03][352978604867482][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:22:03][352978604867482][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:22:03][352978604867482][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:22:03][352978604867482][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 16:22:03][352978604867482][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:22:03][352978604867482][490 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2523\nsuccessfulTxPacketsPerSecond: 0.15180568871844038\nretriedTxPackets: 512\nretriedTxPacketsPerSecond: 0.03195909236177692\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2385\nsuccessfulRxPacketsPerSecond: 0.13582614253755193\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:22:03][352978604867482][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:22:04][352978604867482][865 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=277 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 277.241/277.241/277.241/0.000 ms\n [2025-09-06 16:22:04][352978604867482][865 ms][DEBUG] check_internet: online [2025-09-06 16:22:04][352978604867482][865 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:22:04][352978604867482][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604867482\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8340\"}'\'' -e'"" [2025-09-06 16:22:04][352978604867482][865 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:22:04][352978604867482][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604867482\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8340\"}'\'' -e'"" [2025-09-06 16:22:09][352978604867482][6208 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fca660e1-849d-40c9-8173-726b3daa1e7f","id":"QR_fca660e1-849d-40c9-8173-726b3daa1e7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:22:09][352978604867482][6364 ms][DEBUG] proc_open done in 5499 ms; code=255; res.len=3343 [2025-09-06 16:22:09][352978604867482][6364 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-09-06 16:22:09][352978604867482][6364 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:22:11][352978604867482][1 ms][INFO] === Request start === [2025-09-06 16:22:11][352978604867482][1 ms][DEBUG] START check_scloud [2025-09-06 16:22:11][352978604867482][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:22:12][352978604867482][270 ms][DEBUG] SU: done in 268 ms; outu0_a118 23347 4991 24778596 214332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:22:12][352978604867482][270 ms][DEBUG] targetPkg: running [2025-09-06 16:22:12][352978604867482][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-06 16:22:12][352978604867482][270 ms][DEBUG] START check_boot_completed [2025-09-06 16:22:12][352978604867482][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:22:12][352978604867482][316 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:22:12][352978604867482][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:22:12][352978604867482][363 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:22:12][352978604867482][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:22:12][352978604867482][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:22:12][352978604867482][473 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2523\nsuccessfulTxPacketsPerSecond: 0.15180568871844038\nretriedTxPackets: 512\nretriedTxPacketsPerSecond: 0.03195909236177692\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2385\nsuccessfulRxPacketsPerSecond: 0.13582614253755193\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:22:12][352978604867482][473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:22:12][352978604867482][848 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=266 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 266.773/266.773/266.773/0.000 ms\n [2025-09-06 16:22:12][352978604867482][848 ms][DEBUG] check_internet: online [2025-09-06 16:22:12][352978604867482][848 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:22:12][352978604867482][848 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604867482\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2865\"}'\'' -e'"" [2025-09-06 16:22:12][352978604867482][848 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:22:12][352978604867482][848 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604867482\",\"model\":\"SM-M326B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2865\"}'\'' -e'"" [2025-09-06 16:22:17][352978604867482][6002 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06da7c91-ff5f-4a65-b13f-6f8ca418dd97","id":"QR_06da7c91-ff5f-4a65-b13f-6f8ca418dd97","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:22:18][352978604867482][6159 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-06 16:22:18][352978604867482][6159 ms][DEBUG] END runCmdUntilRes#1 in 5310 ms [2025-09-06 16:22:18][352978604867482][6159 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:22:22][350320366061529][0 ms][INFO] === Request start === [2025-09-06 16:22:22][350320366061529][1 ms][DEBUG] START check_scloud [2025-09-06 16:22:22][350320366061529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:22:22][350320366061529][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 23347 4991 24941676 226556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:22:22][350320366061529][282 ms][DEBUG] targetPkg: running [2025-09-06 16:22:22][350320366061529][282 ms][DEBUG] END check_scloud in 282 ms [2025-09-06 16:22:22][350320366061529][282 ms][DEBUG] START check_boot_completed [2025-09-06 16:22:22][350320366061529][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:22:22][350320366061529][329 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:22:22][350320366061529][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:22:22][350320366061529][376 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:22:22][350320366061529][376 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:22:22][350320366061529][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:22:22][350320366061529][501 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2523\nsuccessfulTxPacketsPerSecond: 0.15180568871844038\nretriedTxPackets: 512\nretriedTxPacketsPerSecond: 0.03195909236177692\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2385\nsuccessfulRxPacketsPerSecond: 0.13582614253755193\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:22:22][350320366061529][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:22:23][350320366061529][938 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.443/298.443/298.443/0.000 ms\n [2025-09-06 16:22:23][350320366061529][939 ms][DEBUG] check_internet: online [2025-09-06 16:22:23][350320366061529][939 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:22:23][350320366061529][939 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320366061529\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6898\"}'\'' -e'"" [2025-09-06 16:22:23][350320366061529][939 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:22:23][350320366061529][939 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320366061529\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6898\"}'\'' -e'"" [2025-09-06 16:22:26][350320366061529][4375 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_105f8b99-79ab-4a83-9f9a-6d6a26b2d37f","id":"QR_105f8b99-79ab-4a83-9f9a-6d6a26b2d37f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:22:26][350320366061529][4531 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-06 16:22:26][350320366061529][4531 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-09-06 16:22:26][350320366061529][4531 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:22:29][350320366061529][0 ms][INFO] === Request start === [2025-09-06 16:22:29][350320366061529][1 ms][DEBUG] START check_scloud [2025-09-06 16:22:29][350320366061529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:22:29][350320366061529][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 23347 4991 25071952 237104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:22:29][350320366061529][301 ms][DEBUG] targetPkg: running [2025-09-06 16:22:29][350320366061529][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-06 16:22:29][350320366061529][301 ms][DEBUG] START check_boot_completed [2025-09-06 16:22:29][350320366061529][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:22:29][350320366061529][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:22:29][350320366061529][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:22:29][350320366061529][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:22:29][350320366061529][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:22:29][350320366061529][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:22:29][350320366061529][488 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2523\nsuccessfulTxPacketsPerSecond: 0.15180568871844038\nretriedTxPackets: 512\nretriedTxPacketsPerSecond: 0.03195909236177692\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2385\nsuccessfulRxPacketsPerSecond: 0.13582614253755193\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:22:29][350320366061529][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:22:30][350320366061529][816 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.969/226.969/226.969/0.000 ms\n [2025-09-06 16:22:30][350320366061529][816 ms][DEBUG] check_internet: online [2025-09-06 16:22:30][350320366061529][816 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:22:30][350320366061529][816 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320366061529\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1186\"}'\'' -e'"" [2025-09-06 16:22:30][350320366061529][816 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:22:30][350320366061529][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320366061529\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1186\"}'\'' -e'"" [2025-09-06 16:22:33][350320366061529][4737 ms][DEBUG] proc_open done in 3920 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 16:22:33][350320366061529][4737 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-09-06 16:22:33][350320366061529][4737 ms][WARN] Detected error: Process with pid 23347 either refused to load frida-agent, or terminated during injectionProcess with pid 23347 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 16:22:33][350320366061529][4737 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 16:22:34][350320366061529][4987 ms][DEBUG] SU: done in 250 ms; outsystem 5412 4991 12776696 199160 ep_poll 0 S system_server\n [2025-09-06 16:22:34][350320366061529][4987 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 16:22:34][350320366061529][5127 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 16:22:34][350320366061529][5127 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 16:22:34][350320366061529][5127 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 16:22:34][350320366061529][5252 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 16:22:34][350320366061529][5253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 16:22:34][350320366061529][5440 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 16:22:36][350320366061529][7455 ms][DEBUG] START check_boot_completed [2025-09-06 16:22:36][350320366061529][7455 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:22:36][350320366061529][7502 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:22:36][350320366061529][7502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:22:36][350320366061529][7549 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:22:36][350320366061529][7549 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 16:22:39][350320366061529][10563 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 16:22:39][350320366061529][10564 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320366061529\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1186\"}'\'' -e'"" [2025-09-06 16:22:44][350320366061529][15156 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb3cd1a5-f66d-493f-995d-8437f314e5a4","id":"QR_cb3cd1a5-f66d-493f-995d-8437f314e5a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:22:44][350320366061529][15312 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-09-06 16:22:44][350320366061529][15312 ms][DEBUG] END runCmdUntilRes#2 in 4749 ms [2025-09-06 16:22:44][350320366061529][15312 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:27:03][351676563599754][1 ms][INFO] === Request start === [2025-09-06 16:27:03][351676563599754][1 ms][DEBUG] START check_scloud [2025-09-06 16:27:03][351676563599754][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:27:03][351676563599754][257 ms][DEBUG] SU: done in 255 ms; outu0_a118 25445 4991 23720808 127152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:27:03][351676563599754][257 ms][DEBUG] targetPkg: running [2025-09-06 16:27:03][351676563599754][257 ms][DEBUG] END check_scloud in 255 ms [2025-09-06 16:27:03][351676563599754][257 ms][DEBUG] START check_boot_completed [2025-09-06 16:27:03][351676563599754][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:27:03][351676563599754][288 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:27:03][351676563599754][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:27:03][351676563599754][335 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:27:03][351676563599754][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 16:27:03][351676563599754][335 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:27:03][351676563599754][335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676563599754\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4306\"}'\'' -e'"" [2025-09-06 16:27:03][351676563599754][335 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:27:03][351676563599754][335 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676563599754\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4306\"}'\'' -e'"" [2025-09-06 16:27:08][351676563599754][5130 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9170f10e-495e-4ae2-9cbd-4e8617a44a9b","id":"QR_9170f10e-495e-4ae2-9cbd-4e8617a44a9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:27:08][351676563599754][5287 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-09-06 16:27:08][351676563599754][5287 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-09-06 16:27:08][351676563599754][5287 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:27:10][351676563599754][0 ms][INFO] === Request start === [2025-09-06 16:27:10][351676563599754][1 ms][DEBUG] START check_scloud [2025-09-06 16:27:10][351676563599754][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:27:11][351676563599754][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 25445 4991 23881840 138248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:27:11][351676563599754][260 ms][DEBUG] targetPkg: running [2025-09-06 16:27:11][351676563599754][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-06 16:27:11][351676563599754][260 ms][DEBUG] START check_boot_completed [2025-09-06 16:27:11][351676563599754][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:27:11][351676563599754][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:27:11][351676563599754][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:27:11][351676563599754][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:27:11][351676563599754][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:27:11][351676563599754][353 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:27:11][351676563599754][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676563599754\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8694\"}'\'' -e'"" [2025-09-06 16:27:11][351676563599754][353 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:27:11][351676563599754][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676563599754\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8694\"}'\'' -e'"" [2025-09-06 16:27:16][351676563599754][5430 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96425b5d-d3b9-4549-ad4f-9b78f2a122b8","id":"QR_96425b5d-d3b9-4549-ad4f-9b78f2a122b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:27:16][351676563599754][5586 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-06 16:27:16][351676563599754][5586 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-06 16:27:16][351676563599754][5586 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:31:06][359290410101194][1 ms][INFO] === Request start === [2025-09-06 16:31:06][359290410101194][1 ms][DEBUG] START check_scloud [2025-09-06 16:31:06][359290410101194][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:31:07][359290410101194][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 25445 4991 24013104 150696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:31:07][359290410101194][305 ms][DEBUG] targetPkg: running [2025-09-06 16:31:07][359290410101194][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 16:31:07][359290410101194][305 ms][DEBUG] START check_boot_completed [2025-09-06 16:31:07][359290410101194][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:31:07][359290410101194][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:31:07][359290410101194][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:31:07][359290410101194][445 ms][DEBUG] SU: done in 93 ms; out [2025-09-06 16:31:07][359290410101194][445 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 16:31:07][359290410101194][445 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:31:07][359290410101194][445 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359290410101194\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4961\"}'\'' -e'"" [2025-09-06 16:31:07][359290410101194][445 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:31:07][359290410101194][445 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359290410101194\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4961\"}'\'' -e'"" [2025-09-06 16:31:12][359290410101194][5584 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_481f874a-2d7a-4eb4-8b7d-9e541817ad99","id":"QR_481f874a-2d7a-4eb4-8b7d-9e541817ad99","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:31:12][359290410101194][5741 ms][DEBUG] proc_open done in 5296 ms; code=255; res.len=3343 [2025-09-06 16:31:12][359290410101194][5741 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-09-06 16:31:12][359290410101194][5741 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:31:18][351695961151463][0 ms][INFO] === Request start === [2025-09-06 16:31:18][351695961151463][1 ms][DEBUG] START check_scloud [2025-09-06 16:31:18][351695961151463][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:31:18][351695961151463][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 25445 4991 24176248 161716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:31:18][351695961151463][290 ms][DEBUG] targetPkg: running [2025-09-06 16:31:18][351695961151463][290 ms][DEBUG] END check_scloud in 289 ms [2025-09-06 16:31:18][351695961151463][290 ms][DEBUG] START check_boot_completed [2025-09-06 16:31:18][351695961151463][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:31:18][351695961151463][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:31:18][351695961151463][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:31:18][351695961151463][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:31:18][351695961151463][383 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 16:31:18][351695961151463][384 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:31:18][351695961151463][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695961151463\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9285\"}'\'' -e'"" [2025-09-06 16:31:18][351695961151463][384 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:31:18][351695961151463][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695961151463\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9285\"}'\'' -e'"" [2025-09-06 16:31:23][351695961151463][5616 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89fa9354-c000-46be-81d8-35000617b144","id":"QR_89fa9354-c000-46be-81d8-35000617b144","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:31:24][351695961151463][5773 ms][DEBUG] proc_open done in 5388 ms; code=255; res.len=3343 [2025-09-06 16:31:24][351695961151463][5773 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-09-06 16:31:24][351695961151463][5773 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:31:27][351695961151463][0 ms][INFO] === Request start === [2025-09-06 16:31:27][351695961151463][1 ms][DEBUG] START check_scloud [2025-09-06 16:31:27][351695961151463][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:31:27][351695961151463][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 25445 4991 24353536 172420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:31:27][351695961151463][286 ms][DEBUG] targetPkg: running [2025-09-06 16:31:27][351695961151463][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 16:31:27][351695961151463][286 ms][DEBUG] START check_boot_completed [2025-09-06 16:31:27][351695961151463][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:31:27][351695961151463][333 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:31:27][351695961151463][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:31:27][351695961151463][395 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 16:31:27][351695961151463][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 16:31:27][351695961151463][395 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:31:27][351695961151463][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695961151463\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4920\"}'\'' -e'"" [2025-09-06 16:31:27][351695961151463][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:31:27][351695961151463][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695961151463\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4920\"}'\'' -e'"" [2025-09-06 16:31:31][351695961151463][4207 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09db383e-cf4b-4964-8eff-597666c1fd45","id":"QR_09db383e-cf4b-4964-8eff-597666c1fd45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:31:31][351695961151463][4363 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-09-06 16:31:31][351695961151463][4363 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-09-06 16:31:31][351695961151463][4363 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:32:05][356933580572875][0 ms][INFO] === Request start === [2025-09-06 16:32:05][356933580572875][1 ms][DEBUG] START check_scloud [2025-09-06 16:32:05][356933580572875][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:32:05][356933580572875][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 25445 4991 24432220 184316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:32:05][356933580572875][299 ms][DEBUG] targetPkg: running [2025-09-06 16:32:05][356933580572875][299 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 16:32:05][356933580572875][299 ms][DEBUG] START check_boot_completed [2025-09-06 16:32:05][356933580572875][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:32:05][356933580572875][346 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:32:05][356933580572875][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:32:05][356933580572875][424 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 16:32:05][356933580572875][424 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 16:32:05][356933580572875][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:32:06][356933580572875][549 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2824\nsuccessfulTxPacketsPerSecond: 0.30221011905750295\nretriedTxPackets: 592\nretriedTxPacketsPerSecond: 0.06309881606695117\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2645\nsuccessfulRxPacketsPerSecond: 0.272321206183684\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:32:06][356933580572875][549 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:32:07][356933580572875][1924 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.442/301.442/301.442/0.000 ms\n [2025-09-06 16:32:07][356933580572875][1924 ms][DEBUG] check_internet: online [2025-09-06 16:32:07][356933580572875][1924 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:32:07][356933580572875][1924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356933580572875\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3805\"}'\'' -e'"" [2025-09-06 16:32:07][356933580572875][1924 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:32:07][356933580572875][1924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356933580572875\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3805\"}'\'' -e'"" [2025-09-06 16:32:12][356933580572875][6672 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8114db11-6b71-4a95-a17b-c99bfa6c8e61","id":"QR_8114db11-6b71-4a95-a17b-c99bfa6c8e61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:32:12][356933580572875][6829 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 16:32:12][356933580572875][6829 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 16:32:12][356933580572875][6829 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:33:03][352600228494200][1 ms][INFO] === Request start === [2025-09-06 16:33:03][352600228494200][1 ms][DEBUG] START check_scloud [2025-09-06 16:33:03][352600228494200][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:33:04][352600228494200][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 25445 4991 24554304 195292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:33:04][352600228494200][295 ms][DEBUG] targetPkg: running [2025-09-06 16:33:04][352600228494200][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 16:33:04][352600228494200][295 ms][DEBUG] START check_boot_completed [2025-09-06 16:33:04][352600228494200][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:33:04][352600228494200][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:33:04][352600228494200][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:33:04][352600228494200][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:33:04][352600228494200][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:33:04][352600228494200][388 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:33:04][352600228494200][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228494200\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6477\"}'\'' -e'"" [2025-09-06 16:33:04][352600228494200][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:33:04][352600228494200][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228494200\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6477\"}'\'' -e'"" [2025-09-06 16:33:09][352600228494200][5324 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0222ded4-5976-4776-8916-61e5b6417ae9","id":"QR_0222ded4-5976-4776-8916-61e5b6417ae9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:33:09][352600228494200][5481 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-06 16:33:09][352600228494200][5481 ms][DEBUG] END runCmdUntilRes#1 in 5093 ms [2025-09-06 16:33:09][352600228494200][5481 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:33:11][352600228494200][0 ms][INFO] === Request start === [2025-09-06 16:33:11][352600228494200][1 ms][DEBUG] START check_scloud [2025-09-06 16:33:11][352600228494200][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:33:11][352600228494200][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 25445 4991 24684104 207204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:33:11][352600228494200][314 ms][DEBUG] targetPkg: running [2025-09-06 16:33:11][352600228494200][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 16:33:11][352600228494200][314 ms][DEBUG] START check_boot_completed [2025-09-06 16:33:11][352600228494200][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:33:11][352600228494200][345 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:33:11][352600228494200][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:33:12][352600228494200][392 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:33:12][352600228494200][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 16:33:12][352600228494200][392 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:33:12][352600228494200][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228494200\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8976\"}'\'' -e'"" [2025-09-06 16:33:12][352600228494200][392 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:33:12][352600228494200][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228494200\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8976\"}'\'' -e'"" [2025-09-06 16:33:17][352600228494200][5547 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9e41d2a-ab16-4a16-8dea-b978daacb6f1","id":"QR_a9e41d2a-ab16-4a16-8dea-b978daacb6f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:33:17][352600228494200][5703 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 16:33:17][352600228494200][5703 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 16:33:17][352600228494200][5703 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:34:03][357962508122231][1 ms][INFO] === Request start === [2025-09-06 16:34:03][357962508122231][1 ms][DEBUG] START check_scloud [2025-09-06 16:34:03][357962508122231][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:34:04][357962508122231][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 25445 4991 24808200 218120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:34:04][357962508122231][302 ms][DEBUG] targetPkg: running [2025-09-06 16:34:04][357962508122231][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 16:34:04][357962508122231][302 ms][DEBUG] START check_boot_completed [2025-09-06 16:34:04][357962508122231][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:34:04][357962508122231][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:34:04][357962508122231][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:34:04][357962508122231][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:34:04][357962508122231][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 16:34:04][357962508122231][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:34:04][357962508122231][489 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2824\nsuccessfulTxPacketsPerSecond: 0.30221011905750295\nretriedTxPackets: 592\nretriedTxPacketsPerSecond: 0.06309881606695117\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2645\nsuccessfulRxPacketsPerSecond: 0.272321206183684\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:34:04][357962508122231][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:34:04][357962508122231][911 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=331 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 331.443/331.443/331.443/0.000 ms\n [2025-09-06 16:34:04][357962508122231][911 ms][DEBUG] check_internet: online [2025-09-06 16:34:04][357962508122231][911 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:34:04][357962508122231][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508122231\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8974\"}'\'' -e'"" [2025-09-06 16:34:04][357962508122231][911 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:34:04][357962508122231][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508122231\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8974\"}'\'' -e'"" [2025-09-06 16:34:08][357962508122231][4410 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_134b9458-98cd-4bc9-b193-1a83787d751a","id":"QR_134b9458-98cd-4bc9-b193-1a83787d751a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:34:08][357962508122231][4566 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-09-06 16:34:08][357962508122231][4566 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-09-06 16:34:08][357962508122231][4567 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:34:10][357962508122231][0 ms][INFO] === Request start === [2025-09-06 16:34:10][357962508122231][1 ms][DEBUG] START check_scloud [2025-09-06 16:34:10][357962508122231][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:34:11][357962508122231][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 25445 4991 24967056 230140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:34:11][357962508122231][269 ms][DEBUG] targetPkg: running [2025-09-06 16:34:11][357962508122231][269 ms][DEBUG] END check_scloud in 269 ms [2025-09-06 16:34:11][357962508122231][270 ms][DEBUG] START check_boot_completed [2025-09-06 16:34:11][357962508122231][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:34:11][357962508122231][316 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:34:11][357962508122231][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:34:11][357962508122231][364 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 16:34:11][357962508122231][364 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 16:34:11][357962508122231][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:34:11][357962508122231][488 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2824\nsuccessfulTxPacketsPerSecond: 0.30221011905750295\nretriedTxPackets: 592\nretriedTxPacketsPerSecond: 0.06309881606695117\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2645\nsuccessfulRxPacketsPerSecond: 0.272321206183684\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:34:11][357962508122231][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:34:11][357962508122231][863 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.304/227.304/227.304/0.000 ms\n [2025-09-06 16:34:11][357962508122231][863 ms][DEBUG] check_internet: online [2025-09-06 16:34:11][357962508122231][863 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:34:11][357962508122231][863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508122231\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6032\"}'\'' -e'"" [2025-09-06 16:34:11][357962508122231][864 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:34:11][357962508122231][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508122231\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6032\"}'\'' -e'"" [2025-09-06 16:34:16][357962508122231][5627 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e6bd0cf1-bd2f-45d2-a055-a13ca2d80f78","id":"QR_e6bd0cf1-bd2f-45d2-a055-a13ca2d80f78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:34:16][357962508122231][5783 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-09-06 16:34:16][357962508122231][5783 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-06 16:34:16][357962508122231][5783 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:35:05][353042531472434][0 ms][INFO] === Request start === [2025-09-06 16:35:05][353042531472434][1 ms][DEBUG] START check_scloud [2025-09-06 16:35:05][353042531472434][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:35:05][353042531472434][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 25445 4991 25062484 241372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:35:05][353042531472434][310 ms][DEBUG] targetPkg: running [2025-09-06 16:35:05][353042531472434][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 16:35:05][353042531472434][310 ms][DEBUG] START check_boot_completed [2025-09-06 16:35:05][353042531472434][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:35:05][353042531472434][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:35:05][353042531472434][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:35:05][353042531472434][419 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 16:35:05][353042531472434][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 16:35:05][353042531472434][419 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:35:05][353042531472434][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353042531472434\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3935\"}'\'' -e'"" [2025-09-06 16:35:05][353042531472434][419 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:35:05][353042531472434][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353042531472434\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3935\"}'\'' -e'"" [2025-09-06 16:35:09][353042531472434][4199 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 16:35:09][353042531472434][4199 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-06 16:35:09][353042531472434][4199 ms][WARN] Detected error: Process with pid 25445 either refused to load frida-agent, or terminated during injectionProcess with pid 25445 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 16:35:09][353042531472434][4199 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 16:35:09][353042531472434][4465 ms][DEBUG] SU: done in 266 ms; outsystem 5412 4991 12776696 187096 ep_poll 0 S system_server\n [2025-09-06 16:35:09][353042531472434][4465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 16:35:09][353042531472434][4605 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 16:35:09][353042531472434][4605 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 16:35:09][353042531472434][4606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 16:35:10][353042531472434][4730 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 16:35:10][353042531472434][4730 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 16:35:10][353042531472434][4871 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 16:35:12][353042531472434][6886 ms][DEBUG] START check_boot_completed [2025-09-06 16:35:12][353042531472434][6886 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:35:12][353042531472434][6933 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:35:12][353042531472434][6933 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:35:12][353042531472434][6980 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:35:12][353042531472434][6980 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 16:35:15][353042531472434][9994 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 16:35:15][353042531472434][9995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353042531472434\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3935\"}'\'' -e'"" [2025-09-06 16:35:21][353042531472434][16024 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c1b229a-f15f-4ed9-adb5-6d7139a5073c","id":"QR_4c1b229a-f15f-4ed9-adb5-6d7139a5073c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:35:21][353042531472434][16180 ms][DEBUG] proc_open done in 6186 ms; code=255; res.len=3343 [2025-09-06 16:35:21][353042531472434][16181 ms][DEBUG] END runCmdUntilRes#2 in 6186 ms [2025-09-06 16:35:21][353042531472434][16181 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:35:24][353042531472434][0 ms][INFO] === Request start === [2025-09-06 16:35:24][353042531472434][1 ms][DEBUG] START check_scloud [2025-09-06 16:35:24][353042531472434][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:35:25][353042531472434][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 27054 4991 23711872 124044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:35:25][353042531472434][254 ms][DEBUG] targetPkg: running [2025-09-06 16:35:25][353042531472434][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 16:35:25][353042531472434][254 ms][DEBUG] START check_boot_completed [2025-09-06 16:35:25][353042531472434][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:35:25][353042531472434][301 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:35:25][353042531472434][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:35:25][353042531472434][347 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:35:25][353042531472434][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:35:25][353042531472434][347 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:35:25][353042531472434][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353042531472434\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4355\"}'\'' -e'"" [2025-09-06 16:35:25][353042531472434][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:35:25][353042531472434][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353042531472434\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4355\"}'\'' -e'"" [2025-09-06 16:35:28][353042531472434][3956 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88eba9d6-e99a-4ac3-b089-80706108e89b","id":"QR_88eba9d6-e99a-4ac3-b089-80706108e89b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:35:29][353042531472434][4112 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=3343 [2025-09-06 16:35:29][353042531472434][4112 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-09-06 16:35:29][353042531472434][4112 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:38:03][354550807671033][1 ms][INFO] === Request start === [2025-09-06 16:38:03][354550807671033][1 ms][DEBUG] START check_scloud [2025-09-06 16:38:03][354550807671033][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:38:03][354550807671033][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 27054 4991 23835496 137920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:38:03][354550807671033][300 ms][DEBUG] targetPkg: running [2025-09-06 16:38:03][354550807671033][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 16:38:03][354550807671033][300 ms][DEBUG] START check_boot_completed [2025-09-06 16:38:03][354550807671033][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:38:03][354550807671033][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:38:03][354550807671033][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:38:03][354550807671033][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:38:03][354550807671033][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 16:38:03][354550807671033][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:38:03][354550807671033][488 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3146\nsuccessfulTxPacketsPerSecond: 0.5873431925170725\nretriedTxPackets: 678\nretriedTxPacketsPerSecond: 0.12272842828714947\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2919\nsuccessfulRxPacketsPerSecond: 0.5259789783734977\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:38:03][354550807671033][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:38:05][354550807671033][1784 ms][DEBUG] SU: done in 1296 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.530/301.530/301.530/0.000 ms\n [2025-09-06 16:38:05][354550807671033][1784 ms][DEBUG] check_internet: online [2025-09-06 16:38:05][354550807671033][1784 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:38:05][354550807671033][1784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354550807671033\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2656\"}'\'' -e'"" [2025-09-06 16:38:05][354550807671033][1784 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:38:05][354550807671033][1784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354550807671033\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2656\"}'\'' -e'"" [2025-09-06 16:38:08][354550807671033][5642 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d337d5a5-f16b-4c4e-8b1d-e54f8682666d","id":"QR_d337d5a5-f16b-4c4e-8b1d-e54f8682666d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:38:09][354550807671033][5799 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-06 16:38:09][354550807671033][5799 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-09-06 16:38:09][354550807671033][5799 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:38:11][354550807671033][0 ms][INFO] === Request start === [2025-09-06 16:38:11][354550807671033][1 ms][DEBUG] START check_scloud [2025-09-06 16:38:11][354550807671033][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:38:11][354550807671033][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 27054 4991 23980016 149688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:38:11][354550807671033][272 ms][DEBUG] targetPkg: running [2025-09-06 16:38:11][354550807671033][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-06 16:38:11][354550807671033][272 ms][DEBUG] START check_boot_completed [2025-09-06 16:38:11][354550807671033][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:38:11][354550807671033][319 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:38:11][354550807671033][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:38:11][354550807671033][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:38:11][354550807671033][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:38:11][354550807671033][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:38:11][354550807671033][459 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3146\nsuccessfulTxPacketsPerSecond: 0.5873431925170725\nretriedTxPackets: 678\nretriedTxPacketsPerSecond: 0.12272842828714947\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2919\nsuccessfulRxPacketsPerSecond: 0.5259789783734977\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:38:11][354550807671033][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:38:12][354550807671033][912 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.158/336.158/336.158/0.000 ms\n [2025-09-06 16:38:12][354550807671033][913 ms][DEBUG] check_internet: online [2025-09-06 16:38:12][354550807671033][913 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:38:12][354550807671033][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354550807671033\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6254\"}'\'' -e'"" [2025-09-06 16:38:12][354550807671033][913 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:38:12][354550807671033][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354550807671033\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6254\"}'\'' -e'"" [2025-09-06 16:38:17][354550807671033][6473 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61c3eab6-cd5f-4c86-b9da-9f5125fecf4c","id":"QR_61c3eab6-cd5f-4c86-b9da-9f5125fecf4c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:38:18][354550807671033][6630 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-06 16:38:18][354550807671033][6630 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-06 16:38:18][354550807671033][6630 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:42:03][354484220586950][0 ms][INFO] === Request start === [2025-09-06 16:42:03][354484220586950][0 ms][DEBUG] START check_scloud [2025-09-06 16:42:03][354484220586950][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:42:04][354484220586950][271 ms][DEBUG] SU: done in 271 ms; outu0_a118 27054 4991 24121648 161152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:42:04][354484220586950][271 ms][DEBUG] targetPkg: running [2025-09-06 16:42:04][354484220586950][271 ms][DEBUG] END check_scloud in 271 ms [2025-09-06 16:42:04][354484220586950][271 ms][DEBUG] START check_boot_completed [2025-09-06 16:42:04][354484220586950][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:42:04][354484220586950][318 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:42:04][354484220586950][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:42:04][354484220586950][365 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:42:04][354484220586950][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:42:04][354484220586950][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:42:04][354484220586950][474 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3146\nsuccessfulTxPacketsPerSecond: 0.5873431925170725\nretriedTxPackets: 678\nretriedTxPacketsPerSecond: 0.12272842828714947\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2919\nsuccessfulRxPacketsPerSecond: 0.5259789783734977\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:42:04][354484220586950][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:42:04][354484220586950][849 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.611/267.611/267.611/0.000 ms\n [2025-09-06 16:42:04][354484220586950][849 ms][DEBUG] check_internet: online [2025-09-06 16:42:04][354484220586950][849 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:42:04][354484220586950][849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484220586950\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6067\"}'\'' -e'"" [2025-09-06 16:42:04][354484220586950][849 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:42:04][354484220586950][849 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484220586950\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6067\"}'\'' -e'"" [2025-09-06 16:42:09][354484220586950][5535 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7ab1e6b-3360-4dc8-8bf2-2806907676fc","id":"QR_a7ab1e6b-3360-4dc8-8bf2-2806907676fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:42:09][354484220586950][5691 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-09-06 16:42:09][354484220586950][5691 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-09-06 16:42:09][354484220586950][5691 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:42:12][354484220586950][0 ms][INFO] === Request start === [2025-09-06 16:42:12][354484220586950][1 ms][DEBUG] START check_scloud [2025-09-06 16:42:12][354484220586950][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:42:12][354484220586950][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 27054 4991 24290680 171824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:42:12][354484220586950][256 ms][DEBUG] targetPkg: running [2025-09-06 16:42:12][354484220586950][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-06 16:42:12][354484220586950][256 ms][DEBUG] START check_boot_completed [2025-09-06 16:42:12][354484220586950][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:42:12][354484220586950][287 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:42:12][354484220586950][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:42:12][354484220586950][334 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:42:12][354484220586950][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 16:42:12][354484220586950][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:42:12][354484220586950][443 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3247\nsuccessfulTxPacketsPerSecond: 0.3285129746361963\nretriedTxPackets: 711\nretriedTxPacketsPerSecond: 0.10733592240588591\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3007\nsuccessfulRxPacketsPerSecond: 0.28622912641569576\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:42:12][354484220586950][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:42:13][354484220586950][1209 ms][DEBUG] SU: done in 765 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=408 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 408.155/408.155/408.155/0.000 ms\n [2025-09-06 16:42:13][354484220586950][1209 ms][DEBUG] check_internet: online [2025-09-06 16:42:13][354484220586950][1209 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:42:13][354484220586950][1209 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484220586950\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8518\"}'\'' -e'"" [2025-09-06 16:42:13][354484220586950][1209 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:42:13][354484220586950][1209 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484220586950\",\"model\":\"SM-S918B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8518\"}'\'' -e'"" [2025-09-06 16:42:18][354484220586950][6567 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15a97e72-ad6b-473f-b52e-885c8d9b6007","id":"QR_15a97e72-ad6b-473f-b52e-885c8d9b6007","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:42:18][354484220586950][6723 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-06 16:42:18][354484220586950][6723 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-06 16:42:18][354484220586950][6723 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:42:23][351506556859412][0 ms][INFO] === Request start === [2025-09-06 16:42:23][351506556859412][1 ms][DEBUG] START check_scloud [2025-09-06 16:42:23][351506556859412][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:42:23][351506556859412][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 27054 4991 24424896 183420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:42:23][351506556859412][297 ms][DEBUG] targetPkg: running [2025-09-06 16:42:23][351506556859412][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 16:42:23][351506556859412][297 ms][DEBUG] START check_boot_completed [2025-09-06 16:42:23][351506556859412][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:42:23][351506556859412][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:42:23][351506556859412][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:42:23][351506556859412][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:42:23][351506556859412][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 16:42:23][351506556859412][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:42:23][351506556859412][515 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3247\nsuccessfulTxPacketsPerSecond: 0.3285129746361963\nretriedTxPackets: 711\nretriedTxPacketsPerSecond: 0.10733592240588591\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3007\nsuccessfulRxPacketsPerSecond: 0.28622912641569576\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:42:23][351506556859412][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:42:24][351506556859412][968 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.644/341.644/341.644/0.000 ms\n [2025-09-06 16:42:24][351506556859412][968 ms][DEBUG] check_internet: online [2025-09-06 16:42:24][351506556859412][968 ms][DEBUG] rawBody.length=1149 [2025-09-06 16:42:24][351506556859412][968 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351506556859412\",\"model\":\"SM-X115\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1267\"}'\'' -e'"" [2025-09-06 16:42:24][351506556859412][968 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:42:24][351506556859412][968 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351506556859412\",\"model\":\"SM-X115\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1267\"}'\'' -e'"" [2025-09-06 16:42:27][351506556859412][4499 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dae5fa06-4c70-40dc-890b-b02a829e1bd9","id":"QR_dae5fa06-4c70-40dc-890b-b02a829e1bd9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:42:27][351506556859412][4655 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-09-06 16:42:27][351506556859412][4655 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-09-06 16:42:27][351506556859412][4655 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:42:30][351506556859412][0 ms][INFO] === Request start === [2025-09-06 16:42:30][351506556859412][1 ms][DEBUG] START check_scloud [2025-09-06 16:42:30][351506556859412][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:42:30][351506556859412][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 27054 4991 24552996 194308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:42:30][351506556859412][265 ms][DEBUG] targetPkg: running [2025-09-06 16:42:30][351506556859412][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-06 16:42:30][351506556859412][265 ms][DEBUG] START check_boot_completed [2025-09-06 16:42:30][351506556859412][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:42:30][351506556859412][312 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:42:30][351506556859412][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:42:30][351506556859412][358 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:42:30][351506556859412][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:42:30][351506556859412][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:42:30][351506556859412][468 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3247\nsuccessfulTxPacketsPerSecond: 0.3285129746361963\nretriedTxPackets: 711\nretriedTxPacketsPerSecond: 0.10733592240588591\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3007\nsuccessfulRxPacketsPerSecond: 0.28622912641569576\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:42:30][351506556859412][468 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:42:31][351506556859412][905 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.736/304.736/304.736/0.000 ms\n [2025-09-06 16:42:31][351506556859412][905 ms][DEBUG] check_internet: online [2025-09-06 16:42:31][351506556859412][905 ms][DEBUG] rawBody.length=1159 [2025-09-06 16:42:31][351506556859412][906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351506556859412\",\"model\":\"SM-X115\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6609\"}'\'' -e'"" [2025-09-06 16:42:31][351506556859412][906 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:42:31][351506556859412][906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351506556859412\",\"model\":\"SM-X115\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6609\"}'\'' -e'"" [2025-09-06 16:42:35][351506556859412][5545 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c1eb64b-93bd-4fa8-a7cc-5c0b7fbe034b","id":"QR_6c1eb64b-93bd-4fa8-a7cc-5c0b7fbe034b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:42:35][351506556859412][5701 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 16:42:35][351506556859412][5701 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-06 16:42:35][351506556859412][5701 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:43:04][350633294650027][0 ms][INFO] === Request start === [2025-09-06 16:43:04][350633294650027][1 ms][DEBUG] START check_scloud [2025-09-06 16:43:04][350633294650027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:43:04][350633294650027][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 27054 4991 24666688 206228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:43:04][350633294650027][299 ms][DEBUG] targetPkg: running [2025-09-06 16:43:04][350633294650027][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 16:43:04][350633294650027][299 ms][DEBUG] START check_boot_completed [2025-09-06 16:43:04][350633294650027][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:43:04][350633294650027][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:43:04][350633294650027][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:43:04][350633294650027][408 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 16:43:04][350633294650027][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 16:43:04][350633294650027][408 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:43:04][350633294650027][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633294650027\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1723\"}'\'' -e'"" [2025-09-06 16:43:04][350633294650027][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:43:04][350633294650027][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633294650027\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1723\"}'\'' -e'"" [2025-09-06 16:43:10][350633294650027][5594 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1b28150-4379-4b2d-aef9-4b7202787450","id":"QR_a1b28150-4379-4b2d-aef9-4b7202787450","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:43:10][350633294650027][5750 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-06 16:43:10][350633294650027][5750 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-06 16:43:10][350633294650027][5750 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:43:13][350633294650027][0 ms][INFO] === Request start === [2025-09-06 16:43:13][350633294650027][1 ms][DEBUG] START check_scloud [2025-09-06 16:43:13][350633294650027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:43:14][350633294650027][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 27054 4991 24820936 216828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:43:14][350633294650027][293 ms][DEBUG] targetPkg: running [2025-09-06 16:43:14][350633294650027][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-06 16:43:14][350633294650027][293 ms][DEBUG] START check_boot_completed [2025-09-06 16:43:14][350633294650027][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:43:14][350633294650027][339 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:43:14][350633294650027][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:43:14][350633294650027][403 ms][DEBUG] SU: done in 64 ms; out [2025-09-06 16:43:14][350633294650027][403 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 16:43:14][350633294650027][403 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:43:14][350633294650027][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633294650027\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6205\"}'\'' -e'"" [2025-09-06 16:43:14][350633294650027][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:43:14][350633294650027][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633294650027\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6205\"}'\'' -e'"" [2025-09-06 16:43:18][350633294650027][5103 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93cbec58-402d-4a84-a811-8cc6d14e58e0","id":"QR_93cbec58-402d-4a84-a811-8cc6d14e58e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:43:19][350633294650027][5259 ms][DEBUG] proc_open done in 4856 ms; code=255; res.len=3343 [2025-09-06 16:43:19][350633294650027][5260 ms][DEBUG] END runCmdUntilRes#1 in 4856 ms [2025-09-06 16:43:19][350633294650027][5260 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:43:21][354747957053992][0 ms][INFO] === Request start === [2025-09-06 16:43:21][354747957053992][1 ms][DEBUG] START check_scloud [2025-09-06 16:43:21][354747957053992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:43:21][354747957053992][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 27054 4991 24990096 228860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:43:21][354747957053992][293 ms][DEBUG] targetPkg: running [2025-09-06 16:43:21][354747957053992][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-06 16:43:21][354747957053992][293 ms][DEBUG] START check_boot_completed [2025-09-06 16:43:21][354747957053992][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:43:21][354747957053992][339 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:43:21][354747957053992][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:43:21][354747957053992][433 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 16:43:21][354747957053992][433 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 16:43:21][354747957053992][433 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:43:21][354747957053992][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957053992\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6823\"}'\'' -e'"" [2025-09-06 16:43:21][354747957053992][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:43:21][354747957053992][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957053992\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6823\"}'\'' -e'"" [2025-09-06 16:43:25][354747957053992][4588 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69b941bb-cade-4d94-8506-749856118692","id":"QR_69b941bb-cade-4d94-8506-749856118692","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:43:25][354747957053992][4744 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-09-06 16:43:25][354747957053992][4744 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-06 16:43:25][354747957053992][4744 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:43:28][354747957053992][0 ms][INFO] === Request start === [2025-09-06 16:43:28][354747957053992][1 ms][DEBUG] START check_scloud [2025-09-06 16:43:28][354747957053992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:43:28][354747957053992][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 27054 4991 25120244 240596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:43:28][354747957053992][303 ms][DEBUG] targetPkg: running [2025-09-06 16:43:28][354747957053992][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 16:43:28][354747957053992][303 ms][DEBUG] START check_boot_completed [2025-09-06 16:43:28][354747957053992][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:43:28][354747957053992][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:43:28][354747957053992][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:43:28][354747957053992][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:43:28][354747957053992][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 16:43:28][354747957053992][396 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:43:28][354747957053992][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957053992\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8597\"}'\'' -e'"" [2025-09-06 16:43:28][354747957053992][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:43:28][354747957053992][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957053992\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8597\"}'\'' -e'"" [2025-09-06 16:43:32][354747957053992][4177 ms][DEBUG] proc_open done in 3781 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 16:43:32][354747957053992][4177 ms][DEBUG] END runCmdUntilRes#1 in 3781 ms [2025-09-06 16:43:32][354747957053992][4177 ms][WARN] Detected error: Process with pid 27054 either refused to load frida-agent, or terminated during injectionProcess with pid 27054 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 16:43:32][354747957053992][4177 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 16:43:32][354747957053992][4489 ms][DEBUG] SU: done in 312 ms; outsystem 5412 4991 12776696 182984 ep_poll 0 S system_server\n [2025-09-06 16:43:32][354747957053992][4489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 16:43:32][354747957053992][4630 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 16:43:32][354747957053992][4630 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 16:43:32][354747957053992][4630 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 16:43:32][354747957053992][4757 ms][DEBUG] SU: done in 127 ms; out [2025-09-06 16:43:32][354747957053992][4757 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 16:43:32][354747957053992][4911 ms][DEBUG] SU: done in 154 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 16:43:35][354747957053992][6926 ms][DEBUG] START check_boot_completed [2025-09-06 16:43:35][354747957053992][6926 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:43:35][354747957053992][6973 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:43:35][354747957053992][6973 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:43:35][354747957053992][7036 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 16:43:35][354747957053992][7036 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 16:43:38][354747957053992][10050 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 16:43:38][354747957053992][10050 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957053992\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8597\"}'\'' -e'"" [2025-09-06 16:43:44][354747957053992][16221 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1b7767b-784a-4d00-a284-193bf7f83c27","id":"QR_d1b7767b-784a-4d00-a284-193bf7f83c27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:43:44][354747957053992][16377 ms][DEBUG] proc_open done in 6327 ms; code=255; res.len=3343 [2025-09-06 16:43:44][354747957053992][16377 ms][DEBUG] END runCmdUntilRes#2 in 6327 ms [2025-09-06 16:43:44][354747957053992][16377 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:46:04][353204335914892][1 ms][INFO] === Request start === [2025-09-06 16:46:04][353204335914892][1 ms][DEBUG] START check_scloud [2025-09-06 16:46:04][353204335914892][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:46:04][353204335914892][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 28458 4991 23675304 127112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:46:04][353204335914892][295 ms][DEBUG] targetPkg: running [2025-09-06 16:46:04][353204335914892][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 16:46:04][353204335914892][295 ms][DEBUG] START check_boot_completed [2025-09-06 16:46:04][353204335914892][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:46:04][353204335914892][327 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:46:04][353204335914892][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:46:04][353204335914892][389 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 16:46:04][353204335914892][390 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 16:46:04][353204335914892][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:46:04][353204335914892][530 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3313\nsuccessfulTxPacketsPerSecond: 1.5716894836958433\nretriedTxPackets: 729\nretriedTxPacketsPerSecond: 0.4286426012495113\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3065\nsuccessfulRxPacketsPerSecond: 1.3811816654365352\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:46:04][353204335914892][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:46:05][353204335914892][967 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=349 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 349.351/349.351/349.351/0.000 ms\n [2025-09-06 16:46:05][353204335914892][967 ms][DEBUG] check_internet: online [2025-09-06 16:46:05][353204335914892][967 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:46:05][353204335914892][967 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204335914892\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5294\"}'\'' -e'"" [2025-09-06 16:46:05][353204335914892][967 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:46:05][353204335914892][967 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204335914892\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5294\"}'\'' -e'"" [2025-09-06 16:46:10][353204335914892][5919 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2fb5b35e-d588-4dd8-ab3c-90877c7e7c8c","id":"QR_2fb5b35e-d588-4dd8-ab3c-90877c7e7c8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:46:10][353204335914892][6075 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 16:46:10][353204335914892][6075 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 16:46:10][353204335914892][6075 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:46:12][353204335914892][0 ms][INFO] === Request start === [2025-09-06 16:46:12][353204335914892][1 ms][DEBUG] START check_scloud [2025-09-06 16:46:12][353204335914892][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:46:12][353204335914892][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 28458 4991 23845516 137776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:46:12][353204335914892][284 ms][DEBUG] targetPkg: running [2025-09-06 16:46:12][353204335914892][284 ms][DEBUG] END check_scloud in 284 ms [2025-09-06 16:46:12][353204335914892][284 ms][DEBUG] START check_boot_completed [2025-09-06 16:46:12][353204335914892][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:46:12][353204335914892][330 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:46:12][353204335914892][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:46:13][353204335914892][393 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 16:46:13][353204335914892][393 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 16:46:13][353204335914892][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:46:13][353204335914892][517 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3313\nsuccessfulTxPacketsPerSecond: 1.5716894836958433\nretriedTxPackets: 729\nretriedTxPacketsPerSecond: 0.4286426012495113\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3065\nsuccessfulRxPacketsPerSecond: 1.3811816654365352\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:46:13][353204335914892][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:46:13][353204335914892][955 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=347 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 347.546/347.546/347.546/0.000 ms\n [2025-09-06 16:46:13][353204335914892][955 ms][DEBUG] check_internet: online [2025-09-06 16:46:13][353204335914892][955 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:46:13][353204335914892][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204335914892\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1806\"}'\'' -e'"" [2025-09-06 16:46:13][353204335914892][955 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:46:13][353204335914892][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204335914892\",\"model\":\"SM-A546B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1806\"}'\'' -e'"" [2025-09-06 16:46:18][353204335914892][5907 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44216538-fc9c-45a6-8407-bbc5ba42bcb5","id":"QR_44216538-fc9c-45a6-8407-bbc5ba42bcb5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:46:18][353204335914892][6063 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 16:46:18][353204335914892][6063 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 16:46:18][353204335914892][6063 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:48:04][354261834433344][0 ms][INFO] === Request start === [2025-09-06 16:48:04][354261834433344][1 ms][DEBUG] START check_scloud [2025-09-06 16:48:04][354261834433344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:48:05][354261834433344][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 28458 4991 23949132 149868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:48:05][354261834433344][307 ms][DEBUG] targetPkg: running [2025-09-06 16:48:05][354261834433344][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 16:48:05][354261834433344][307 ms][DEBUG] START check_boot_completed [2025-09-06 16:48:05][354261834433344][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:48:05][354261834433344][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:48:05][354261834433344][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:48:05][354261834433344][402 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 16:48:05][354261834433344][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 16:48:05][354261834433344][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:48:05][354261834433344][542 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3484\nsuccessfulTxPacketsPerSecond: 0.6600150529748924\nretriedTxPackets: 780\nretriedTxPacketsPerSecond: 0.19684659474689772\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3207\nsuccessfulRxPacketsPerSecond: 0.5480826755697937\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:48:05][354261834433344][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:48:06][354261834433344][1978 ms][DEBUG] SU: done in 1436 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.465/300.465/300.465/0.000 ms\n [2025-09-06 16:48:06][354261834433344][1979 ms][DEBUG] check_internet: online [2025-09-06 16:48:06][354261834433344][1979 ms][DEBUG] rawBody.length=1161 [2025-09-06 16:48:06][354261834433344][1979 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261834433344\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2435\"}'\'' -e'"" [2025-09-06 16:48:06][354261834433344][1979 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:48:06][354261834433344][1979 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261834433344\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2435\"}'\'' -e'"" [2025-09-06 16:48:12][354261834433344][7524 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73eca91b-0d98-44e1-b76f-966037542ada","id":"QR_73eca91b-0d98-44e1-b76f-966037542ada","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:48:12][354261834433344][7680 ms][DEBUG] proc_open done in 5701 ms; code=255; res.len=3343 [2025-09-06 16:48:12][354261834433344][7680 ms][DEBUG] END runCmdUntilRes#1 in 5701 ms [2025-09-06 16:48:12][354261834433344][7680 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:48:16][354261834433344][1 ms][INFO] === Request start === [2025-09-06 16:48:16][354261834433344][1 ms][DEBUG] START check_scloud [2025-09-06 16:48:16][354261834433344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:48:16][354261834433344][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 28458 4991 24087636 160864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:48:16][354261834433344][301 ms][DEBUG] targetPkg: running [2025-09-06 16:48:16][354261834433344][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-06 16:48:16][354261834433344][301 ms][DEBUG] START check_boot_completed [2025-09-06 16:48:16][354261834433344][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:48:16][354261834433344][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:48:16][354261834433344][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:48:16][354261834433344][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:48:16][354261834433344][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 16:48:16][354261834433344][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 16:48:16][354261834433344][504 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3484\nsuccessfulTxPacketsPerSecond: 0.6600150529748924\nretriedTxPackets: 780\nretriedTxPacketsPerSecond: 0.19684659474689772\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3207\nsuccessfulRxPacketsPerSecond: 0.5480826755697937\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 16:48:16][354261834433344][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 16:48:17][354261834433344][894 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=283 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 283.757/283.757/283.757/0.000 ms\n [2025-09-06 16:48:17][354261834433344][895 ms][DEBUG] check_internet: online [2025-09-06 16:48:17][354261834433344][895 ms][DEBUG] rawBody.length=1151 [2025-09-06 16:48:17][354261834433344][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261834433344\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9692\"}'\'' -e'"" [2025-09-06 16:48:17][354261834433344][895 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:48:17][354261834433344][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261834433344\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9692\"}'\'' -e'"" [2025-09-06 16:48:20][354261834433344][4597 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4c7e7c7-7c3f-4a9c-ac6b-6ba78cbf46e8","id":"QR_d4c7e7c7-7c3f-4a9c-ac6b-6ba78cbf46e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:48:20][354261834433344][4753 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-06 16:48:20][354261834433344][4753 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-06 16:48:20][354261834433344][4753 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:51:05][350948905672057][1 ms][INFO] === Request start === [2025-09-06 16:51:05][350948905672057][1 ms][DEBUG] START check_scloud [2025-09-06 16:51:05][350948905672057][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:51:05][350948905672057][336 ms][DEBUG] SU: done in 335 ms; outu0_a118 28458 4991 24180756 158656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:51:05][350948905672057][336 ms][DEBUG] targetPkg: running [2025-09-06 16:51:05][350948905672057][336 ms][DEBUG] END check_scloud in 335 ms [2025-09-06 16:51:05][350948905672057][336 ms][DEBUG] START check_boot_completed [2025-09-06 16:51:05][350948905672057][336 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:51:05][350948905672057][367 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:51:05][350948905672057][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:51:05][350948905672057][414 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 16:51:05][350948905672057][414 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 16:51:05][350948905672057][414 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:51:05][350948905672057][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350948905672057\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3312\"}'\'' -e'"" [2025-09-06 16:51:05][350948905672057][414 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:51:05][350948905672057][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350948905672057\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3312\"}'\'' -e'"" [2025-09-06 16:51:10][350948905672057][5850 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c34dcb59-a3ea-4fc5-9a3a-68278f7079d2","id":"QR_c34dcb59-a3ea-4fc5-9a3a-68278f7079d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:51:11][350948905672057][6007 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-09-06 16:51:11][350948905672057][6007 ms][DEBUG] END runCmdUntilRes#1 in 5593 ms [2025-09-06 16:51:11][350948905672057][6007 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:51:14][350948905672057][0 ms][INFO] === Request start === [2025-09-06 16:51:14][350948905672057][1 ms][DEBUG] START check_scloud [2025-09-06 16:51:14][350948905672057][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:51:14][350948905672057][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 28458 4991 24313116 142028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:51:14][350948905672057][285 ms][DEBUG] targetPkg: running [2025-09-06 16:51:14][350948905672057][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 16:51:14][350948905672057][285 ms][DEBUG] START check_boot_completed [2025-09-06 16:51:14][350948905672057][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:51:14][350948905672057][332 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 16:51:14][350948905672057][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:51:15][350948905672057][394 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 16:51:15][350948905672057][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 16:51:15][350948905672057][394 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:51:15][350948905672057][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350948905672057\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1011\"}'\'' -e'"" [2025-09-06 16:51:15][350948905672057][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:51:15][350948905672057][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350948905672057\",\"model\":\"SM-G991B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1011\"}'\'' -e'"" [2025-09-06 16:51:19][350948905672057][4768 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_acf8de3e-9905-4621-9ab7-aa19b652c8f1","id":"QR_acf8de3e-9905-4621-9ab7-aa19b652c8f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:51:19][350948905672057][4924 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-09-06 16:51:19][350948905672057][4924 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-06 16:51:19][350948905672057][4924 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:53:04][351477972741412][0 ms][INFO] === Request start === [2025-09-06 16:53:04][351477972741412][1 ms][DEBUG] START check_scloud [2025-09-06 16:53:04][351477972741412][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:53:04][351477972741412][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 28458 4991 24449500 152052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:53:04][351477972741412][309 ms][DEBUG] targetPkg: running [2025-09-06 16:53:04][351477972741412][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 16:53:04][351477972741412][310 ms][DEBUG] START check_boot_completed [2025-09-06 16:53:04][351477972741412][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:53:04][351477972741412][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:53:04][351477972741412][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:53:04][351477972741412][405 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 16:53:04][351477972741412][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 16:53:04][351477972741412][405 ms][DEBUG] rawBody.length=1150 [2025-09-06 16:53:04][351477972741412][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972741412\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8923\"}'\'' -e'"" [2025-09-06 16:53:04][351477972741412][405 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:53:04][351477972741412][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972741412\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8923\"}'\'' -e'"" [2025-09-06 16:53:09][351477972741412][5214 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fdc89f15-861f-473a-9040-b3eb7b403cb3","id":"QR_fdc89f15-861f-473a-9040-b3eb7b403cb3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:53:09][351477972741412][5370 ms][DEBUG] proc_open done in 4965 ms; code=255; res.len=3343 [2025-09-06 16:53:09][351477972741412][5370 ms][DEBUG] END runCmdUntilRes#1 in 4965 ms [2025-09-06 16:53:09][351477972741412][5370 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:53:12][351477972741412][1 ms][INFO] === Request start === [2025-09-06 16:53:12][351477972741412][1 ms][DEBUG] START check_scloud [2025-09-06 16:53:12][351477972741412][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:53:12][351477972741412][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 28458 4991 24583780 160352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:53:12][351477972741412][312 ms][DEBUG] targetPkg: running [2025-09-06 16:53:12][351477972741412][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 16:53:12][351477972741412][312 ms][DEBUG] START check_boot_completed [2025-09-06 16:53:12][351477972741412][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:53:12][351477972741412][358 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 16:53:12][351477972741412][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:53:13][351477972741412][407 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 16:53:13][351477972741412][407 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-06 16:53:13][351477972741412][408 ms][DEBUG] rawBody.length=1160 [2025-09-06 16:53:13][351477972741412][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972741412\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7058\"}'\'' -e'"" [2025-09-06 16:53:13][351477972741412][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:53:13][351477972741412][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972741412\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7058\"}'\'' -e'"" [2025-09-06 16:53:18][351477972741412][5654 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7681e67-8e06-4ce5-add8-3fa7bab7c33c","id":"QR_f7681e67-8e06-4ce5-add8-3fa7bab7c33c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:53:18][351477972741412][5810 ms][DEBUG] proc_open done in 5402 ms; code=255; res.len=3343 [2025-09-06 16:53:18][351477972741412][5810 ms][DEBUG] END runCmdUntilRes#1 in 5402 ms [2025-09-06 16:53:18][351477972741412][5810 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 16:57:06][355857115169371][1 ms][INFO] === Request start === [2025-09-06 16:57:06][355857115169371][1 ms][DEBUG] START check_scloud [2025-09-06 16:57:06][355857115169371][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 16:57:06][355857115169371][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 28458 4991 24695460 172236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 16:57:06][355857115169371][309 ms][DEBUG] targetPkg: running [2025-09-06 16:57:06][355857115169371][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 16:57:06][355857115169371][309 ms][DEBUG] START check_boot_completed [2025-09-06 16:57:06][355857115169371][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 16:57:06][355857115169371][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 16:57:06][355857115169371][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 16:57:06][355857115169371][388 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 16:57:06][355857115169371][388 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 16:57:06][355857115169371][388 ms][DEBUG] rawBody.length=1170 [2025-09-06 16:57:06][355857115169371][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115169371\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W80BZ1QZ\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5042\"}'\'' -e'"" [2025-09-06 16:57:06][355857115169371][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 16:57:06][355857115169371][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115169371\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W80BZ1QZ\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5042\"}'\'' -e'"" [2025-09-06 16:57:12][355857115169371][6229 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6776856a-e365-4329-bcd4-69e6db503050","id":"QR_6776856a-e365-4329-bcd4-69e6db503050","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 16:57:12][355857115169371][6386 ms][DEBUG] proc_open done in 5997 ms; code=255; res.len=3343 [2025-09-06 16:57:12][355857115169371][6386 ms][DEBUG] END runCmdUntilRes#1 in 5997 ms [2025-09-06 16:57:12][355857115169371][6386 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:00:04][352455562893164][1 ms][INFO] === Request start === [2025-09-06 17:00:04][352455562893164][1 ms][DEBUG] START check_scloud [2025-09-06 17:00:04][352455562893164][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:00:04][352455562893164][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 28458 4991 24807304 181412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:00:04][352455562893164][313 ms][DEBUG] targetPkg: running [2025-09-06 17:00:04][352455562893164][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 17:00:04][352455562893164][313 ms][DEBUG] START check_boot_completed [2025-09-06 17:00:04][352455562893164][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:00:04][352455562893164][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:00:04][352455562893164][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:00:04][352455562893164][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 17:00:04][352455562893164][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 17:00:04][352455562893164][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:00:04][352455562893164][578 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3977\nsuccessfulTxPacketsPerSecond: 0.22596617153490844\nretriedTxPackets: 890\nretriedTxPacketsPerSecond: 0.09636792609576977\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3641\nsuccessfulRxPacketsPerSecond: 0.1860897883228658\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:00:04][352455562893164][578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:00:06][352455562893164][1906 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.667/301.667/301.667/0.000 ms\n [2025-09-06 17:00:06][352455562893164][1906 ms][DEBUG] check_internet: online [2025-09-06 17:00:06][352455562893164][1906 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:00:06][352455562893164][1906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352455562893164\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9534\"}'\'' -e'"" [2025-09-06 17:00:06][352455562893164][1906 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:00:06][352455562893164][1906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352455562893164\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9534\"}'\'' -e'"" [2025-09-06 17:00:10][352455562893164][6749 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47bd7307-1dc0-4efd-aefb-cc320cd905dd","id":"QR_47bd7307-1dc0-4efd-aefb-cc320cd905dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:00:11][352455562893164][6905 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-06 17:00:11][352455562893164][6905 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-09-06 17:00:11][352455562893164][6905 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:00:13][352455562893164][0 ms][INFO] === Request start === [2025-09-06 17:00:13][352455562893164][1 ms][DEBUG] START check_scloud [2025-09-06 17:00:13][352455562893164][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:00:13][352455562893164][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 28458 4991 24931472 192296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:00:13][352455562893164][290 ms][DEBUG] targetPkg: running [2025-09-06 17:00:13][352455562893164][290 ms][DEBUG] END check_scloud in 290 ms [2025-09-06 17:00:13][352455562893164][290 ms][DEBUG] START check_boot_completed [2025-09-06 17:00:13][352455562893164][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:00:13][352455562893164][337 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:00:13][352455562893164][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:00:13][352455562893164][430 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 17:00:13][352455562893164][430 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 17:00:13][352455562893164][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:00:13][352455562893164][587 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3977\nsuccessfulTxPacketsPerSecond: 0.22596617153490844\nretriedTxPackets: 890\nretriedTxPacketsPerSecond: 0.09636792609576977\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3641\nsuccessfulRxPacketsPerSecond: 0.1860897883228658\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:00:13][352455562893164][587 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:00:14][352455562893164][946 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.717/246.717/246.717/0.000 ms\n [2025-09-06 17:00:14][352455562893164][946 ms][DEBUG] check_internet: online [2025-09-06 17:00:14][352455562893164][946 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:00:14][352455562893164][946 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352455562893164\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8091\"}'\'' -e'"" [2025-09-06 17:00:14][352455562893164][946 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:00:14][352455562893164][946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352455562893164\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8091\"}'\'' -e'"" [2025-09-06 17:00:18][352455562893164][5288 ms][DEBUG] proc_open done in 4342 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 17:00:18][352455562893164][5289 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-09-06 17:00:18][352455562893164][5289 ms][WARN] Detected error: Process with pid 28458 either refused to load frida-agent, or terminated during injectionProcess with pid 28458 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 17:00:18][352455562893164][5289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 17:00:18][352455562893164][5539 ms][DEBUG] SU: done in 250 ms; outsystem 5412 4991 12887328 209772 ep_poll 0 S system_server\n [2025-09-06 17:00:18][352455562893164][5539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 17:00:19][352455562893164][5679 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 17:00:19][352455562893164][5679 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 17:00:19][352455562893164][5679 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 17:00:19][352455562893164][5835 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 17:00:19][352455562893164][5835 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 17:00:19][352455562893164][6007 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 17:00:21][352455562893164][8022 ms][DEBUG] START check_boot_completed [2025-09-06 17:00:21][352455562893164][8022 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:00:21][352455562893164][8069 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:00:21][352455562893164][8069 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:00:21][352455562893164][8132 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 17:00:21][352455562893164][8132 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 17:00:24][352455562893164][11146 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 17:00:24][352455562893164][11147 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352455562893164\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8091\"}'\'' -e'"" [2025-09-06 17:00:29][352455562893164][16020 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78bd6087-6814-4668-b049-b007587361d0","id":"QR_78bd6087-6814-4668-b049-b007587361d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:00:29][352455562893164][16176 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-09-06 17:00:29][352455562893164][16177 ms][DEBUG] END runCmdUntilRes#2 in 5030 ms [2025-09-06 17:00:29][352455562893164][16177 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:01:05][351695960832311][0 ms][INFO] === Request start === [2025-09-06 17:01:05][351695960832311][1 ms][DEBUG] START check_scloud [2025-09-06 17:01:05][351695960832311][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:01:05][351695960832311][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 31107 4991 23677848 128360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:01:05][351695960832311][298 ms][DEBUG] targetPkg: running [2025-09-06 17:01:05][351695960832311][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 17:01:05][351695960832311][298 ms][DEBUG] START check_boot_completed [2025-09-06 17:01:05][351695960832311][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:01:05][351695960832311][345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:01:05][351695960832311][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:01:05][351695960832311][407 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 17:01:05][351695960832311][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 17:01:05][351695960832311][407 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:01:05][351695960832311][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960832311\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5968\"}'\'' -e'"" [2025-09-06 17:01:05][351695960832311][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:01:05][351695960832311][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960832311\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5968\"}'\'' -e'"" [2025-09-06 17:01:13][351695960832311][8483 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fac1a8e2-6cd3-4af2-8c16-d7435b4a9494","id":"QR_fac1a8e2-6cd3-4af2-8c16-d7435b4a9494","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:01:13][351695960832311][8639 ms][DEBUG] proc_open done in 8232 ms; code=255; res.len=3343 [2025-09-06 17:01:13][351695960832311][8639 ms][DEBUG] END runCmdUntilRes#1 in 8232 ms [2025-09-06 17:01:13][351695960832311][8639 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:01:17][351695960832311][0 ms][INFO] === Request start === [2025-09-06 17:01:17][351695960832311][1 ms][DEBUG] START check_scloud [2025-09-06 17:01:17][351695960832311][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:01:17][351695960832311][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 31107 4991 23834528 139120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:01:17][351695960832311][265 ms][DEBUG] targetPkg: running [2025-09-06 17:01:17][351695960832311][265 ms][DEBUG] END check_scloud in 265 ms [2025-09-06 17:01:17][351695960832311][265 ms][DEBUG] START check_boot_completed [2025-09-06 17:01:17][351695960832311][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:01:17][351695960832311][312 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:01:17][351695960832311][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:01:17][351695960832311][406 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 17:01:17][351695960832311][406 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 17:01:17][351695960832311][406 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:01:17][351695960832311][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960832311\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2163\"}'\'' -e'"" [2025-09-06 17:01:17][351695960832311][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:01:17][351695960832311][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351695960832311\",\"model\":\"SM-M135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2163\"}'\'' -e'"" [2025-09-06 17:01:22][351695960832311][5076 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eee6faec-1f8f-4cfd-8ba2-a83e32c033e2","id":"QR_eee6faec-1f8f-4cfd-8ba2-a83e32c033e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:01:22][351695960832311][5233 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=3343 [2025-09-06 17:01:22][351695960832311][5233 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-09-06 17:01:22][351695960832311][5233 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:04:04][353389394059455][1 ms][INFO] === Request start === [2025-09-06 17:04:04][353389394059455][1 ms][DEBUG] START check_scloud [2025-09-06 17:04:04][353389394059455][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:04:04][353389394059455][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 31107 4991 23975976 150424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:04:04][353389394059455][304 ms][DEBUG] targetPkg: running [2025-09-06 17:04:04][353389394059455][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 17:04:04][353389394059455][304 ms][DEBUG] START check_boot_completed [2025-09-06 17:04:04][353389394059455][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:04:04][353389394059455][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 17:04:04][353389394059455][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:04:04][353389394059455][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:04:04][353389394059455][382 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 17:04:04][353389394059455][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:04:04][353389394059455][491 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4017\nsuccessfulTxPacketsPerSecond: 1.0908056761500762\nretriedTxPackets: 902\nretriedTxPacketsPerSecond: 0.3272418432901737\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3672\nsuccessfulRxPacketsPerSecond: 0.8453744529080529\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:04:04][353389394059455][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:04:06][353389394059455][1897 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.677/299.677/299.677/0.000 ms\n [2025-09-06 17:04:06][353389394059455][1897 ms][DEBUG] check_internet: online [2025-09-06 17:04:06][353389394059455][1898 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:04:06][353389394059455][1898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353389394059455\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6145\"}'\'' -e'"" [2025-09-06 17:04:06][353389394059455][1898 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:04:06][353389394059455][1898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353389394059455\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6145\"}'\'' -e'"" [2025-09-06 17:04:11][353389394059455][7146 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_352152b9-9daf-4c4c-8525-8bbaa58d3c6e","id":"QR_352152b9-9daf-4c4c-8525-8bbaa58d3c6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:04:11][353389394059455][7302 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-06 17:04:11][353389394059455][7302 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-06 17:04:11][353389394059455][7302 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:04:15][353389394059455][0 ms][INFO] === Request start === [2025-09-06 17:04:15][353389394059455][1 ms][DEBUG] START check_scloud [2025-09-06 17:04:15][353389394059455][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:04:15][353389394059455][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 31107 4991 24149232 161500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:04:15][353389394059455][279 ms][DEBUG] targetPkg: running [2025-09-06 17:04:15][353389394059455][279 ms][DEBUG] END check_scloud in 279 ms [2025-09-06 17:04:15][353389394059455][279 ms][DEBUG] START check_boot_completed [2025-09-06 17:04:15][353389394059455][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:04:15][353389394059455][324 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 17:04:15][353389394059455][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:04:15][353389394059455][387 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 17:04:15][353389394059455][387 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 17:04:15][353389394059455][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:04:15][353389394059455][512 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4017\nsuccessfulTxPacketsPerSecond: 1.0908056761500762\nretriedTxPackets: 902\nretriedTxPacketsPerSecond: 0.3272418432901737\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3672\nsuccessfulRxPacketsPerSecond: 0.8453744529080529\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:04:15][353389394059455][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:04:16][353389394059455][918 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.237/304.237/304.237/0.000 ms\n [2025-09-06 17:04:16][353389394059455][918 ms][DEBUG] check_internet: online [2025-09-06 17:04:16][353389394059455][918 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:04:16][353389394059455][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353389394059455\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6272\"}'\'' -e'"" [2025-09-06 17:04:16][353389394059455][919 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:04:16][353389394059455][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353389394059455\",\"model\":\"SM-G990E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6272\"}'\'' -e'"" [2025-09-06 17:04:20][353389394059455][4761 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_682edcb2-ecba-4761-8855-5f6cadfc1887","id":"QR_682edcb2-ecba-4761-8855-5f6cadfc1887","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:04:20][353389394059455][4917 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-06 17:04:20][353389394059455][4917 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-09-06 17:04:20][353389394059455][4917 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:05:04][355497591432124][1 ms][INFO] === Request start === [2025-09-06 17:05:04][355497591432124][1 ms][DEBUG] START check_scloud [2025-09-06 17:05:04][355497591432124][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:05:04][355497591432124][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 31107 4991 24283568 172408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:05:04][355497591432124][305 ms][DEBUG] targetPkg: running [2025-09-06 17:05:04][355497591432124][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 17:05:04][355497591432124][305 ms][DEBUG] START check_boot_completed [2025-09-06 17:05:04][355497591432124][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:05:04][355497591432124][351 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:05:04][355497591432124][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:05:04][355497591432124][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:05:04][355497591432124][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:05:04][355497591432124][398 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:05:04][355497591432124][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497591432124\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5117\"}'\'' -e'"" [2025-09-06 17:05:04][355497591432124][398 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:05:04][355497591432124][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497591432124\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5117\"}'\'' -e'"" [2025-09-06 17:05:08][355497591432124][3866 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67151900-0446-4423-8ce0-03e81336730b","id":"QR_67151900-0446-4423-8ce0-03e81336730b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:05:08][355497591432124][4022 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=3343 [2025-09-06 17:05:08][355497591432124][4022 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-09-06 17:05:08][355497591432124][4023 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:05:10][355497591432124][1 ms][INFO] === Request start === [2025-09-06 17:05:10][355497591432124][1 ms][DEBUG] START check_scloud [2025-09-06 17:05:10][355497591432124][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:05:11][355497591432124][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 31107 4991 24429112 184168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:05:11][355497591432124][289 ms][DEBUG] targetPkg: running [2025-09-06 17:05:11][355497591432124][289 ms][DEBUG] END check_scloud in 288 ms [2025-09-06 17:05:11][355497591432124][289 ms][DEBUG] START check_boot_completed [2025-09-06 17:05:11][355497591432124][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:05:11][355497591432124][336 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:05:11][355497591432124][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:05:11][355497591432124][398 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 17:05:11][355497591432124][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 17:05:11][355497591432124][399 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:05:11][355497591432124][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497591432124\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1904\"}'\'' -e'"" [2025-09-06 17:05:11][355497591432124][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:05:11][355497591432124][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497591432124\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1904\"}'\'' -e'"" [2025-09-06 17:05:17][355497591432124][6319 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26489163-4773-4246-95ff-6a70dc62f4f1","id":"QR_26489163-4773-4246-95ff-6a70dc62f4f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:05:17][355497591432124][6475 ms][DEBUG] proc_open done in 6076 ms; code=255; res.len=3343 [2025-09-06 17:05:17][355497591432124][6475 ms][DEBUG] END runCmdUntilRes#1 in 6076 ms [2025-09-06 17:05:17][355497591432124][6475 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:08:04][356257540910326][1 ms][INFO] === Request start === [2025-09-06 17:08:04][356257540910326][1 ms][DEBUG] START check_scloud [2025-09-06 17:08:04][356257540910326][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:08:04][356257540910326][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 31107 4991 24530168 195712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:08:04][356257540910326][247 ms][DEBUG] targetPkg: running [2025-09-06 17:08:04][356257540910326][247 ms][DEBUG] END check_scloud in 245 ms [2025-09-06 17:08:04][356257540910326][247 ms][DEBUG] START check_boot_completed [2025-09-06 17:08:04][356257540910326][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:08:04][356257540910326][291 ms][DEBUG] ADB: done in 44 ms; out [2025-09-06 17:08:04][356257540910326][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:08:04][356257540910326][338 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:08:04][356257540910326][338 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 17:08:04][356257540910326][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:08:04][356257540910326][479 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4202\nsuccessfulTxPacketsPerSecond: 0.6993218468144945\nretriedTxPackets: 950\nretriedTxPacketsPerSecond: 0.18144566836267964\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3835\nsuccessfulRxPacketsPerSecond: 0.616159248814933\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:08:04][356257540910326][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:08:06][356257540910326][1853 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.844/298.844/298.844/0.000 ms\n [2025-09-06 17:08:06][356257540910326][1853 ms][DEBUG] check_internet: online [2025-09-06 17:08:06][356257540910326][1853 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:08:06][356257540910326][1854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356257540910326\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4109\"}'\'' -e'"" [2025-09-06 17:08:06][356257540910326][1854 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:08:06][356257540910326][1854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356257540910326\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4109\"}'\'' -e'"" [2025-09-06 17:08:11][356257540910326][7477 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0302b90c-ea18-4446-8730-8c20f84f81ba","id":"QR_0302b90c-ea18-4446-8730-8c20f84f81ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:08:12][356257540910326][7633 ms][DEBUG] proc_open done in 5780 ms; code=255; res.len=3343 [2025-09-06 17:08:12][356257540910326][7633 ms][DEBUG] END runCmdUntilRes#1 in 5780 ms [2025-09-06 17:08:12][356257540910326][7633 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:08:15][356257540910326][0 ms][INFO] === Request start === [2025-09-06 17:08:15][356257540910326][1 ms][DEBUG] START check_scloud [2025-09-06 17:08:15][356257540910326][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:08:15][356257540910326][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 31107 4991 24686976 207484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:08:15][356257540910326][317 ms][DEBUG] targetPkg: running [2025-09-06 17:08:15][356257540910326][317 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 17:08:15][356257540910326][317 ms][DEBUG] START check_boot_completed [2025-09-06 17:08:15][356257540910326][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:08:15][356257540910326][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:08:15][356257540910326][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:08:16][356257540910326][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 17:08:16][356257540910326][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 17:08:16][356257540910326][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:08:16][356257540910326][583 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4202\nsuccessfulTxPacketsPerSecond: 0.6993218468144945\nretriedTxPackets: 950\nretriedTxPacketsPerSecond: 0.18144566836267964\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3835\nsuccessfulRxPacketsPerSecond: 0.616159248814933\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:08:16][356257540910326][583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:08:16][356257540910326][1020 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=327 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 327.798/327.798/327.798/0.000 ms\n [2025-09-06 17:08:16][356257540910326][1020 ms][DEBUG] check_internet: online [2025-09-06 17:08:16][356257540910326][1020 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:08:16][356257540910326][1020 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356257540910326\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1206\"}'\'' -e'"" [2025-09-06 17:08:16][356257540910326][1020 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:08:16][356257540910326][1020 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356257540910326\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1206\"}'\'' -e'"" [2025-09-06 17:08:20][356257540910326][4988 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06eaf2d1-a4f7-4d2d-bedf-f66b63569213","id":"QR_06eaf2d1-a4f7-4d2d-bedf-f66b63569213","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:08:20][356257540910326][5144 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-09-06 17:08:20][356257540910326][5144 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-09-06 17:08:20][356257540910326][5144 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:11:03][351477979308702][0 ms][INFO] === Request start === [2025-09-06 17:11:03][351477979308702][0 ms][DEBUG] START check_scloud [2025-09-06 17:11:03][351477979308702][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:11:04][351477979308702][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 31107 4991 24774080 217864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:11:04][351477979308702][293 ms][DEBUG] targetPkg: running [2025-09-06 17:11:04][351477979308702][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-06 17:11:04][351477979308702][294 ms][DEBUG] START check_boot_completed [2025-09-06 17:11:04][351477979308702][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:11:04][351477979308702][340 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:11:04][351477979308702][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:11:04][351477979308702][388 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 17:11:04][351477979308702][388 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 17:11:04][351477979308702][389 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:11:04][351477979308702][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979308702\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1631\"}'\'' -e'"" [2025-09-06 17:11:04][351477979308702][389 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:11:04][351477979308702][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979308702\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1631\"}'\'' -e'"" [2025-09-06 17:11:09][351477979308702][5151 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff9f11e4-fb3a-450d-8348-3f7b06e40a57","id":"QR_ff9f11e4-fb3a-450d-8348-3f7b06e40a57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:11:09][351477979308702][5308 ms][DEBUG] proc_open done in 4919 ms; code=255; res.len=3343 [2025-09-06 17:11:09][351477979308702][5308 ms][DEBUG] END runCmdUntilRes#1 in 4919 ms [2025-09-06 17:11:09][351477979308702][5308 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:11:11][351477979308702][0 ms][INFO] === Request start === [2025-09-06 17:11:11][351477979308702][1 ms][DEBUG] START check_scloud [2025-09-06 17:11:11][351477979308702][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:11:11][351477979308702][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 31107 4991 24920776 229644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:11:11][351477979308702][295 ms][DEBUG] targetPkg: running [2025-09-06 17:11:11][351477979308702][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 17:11:11][351477979308702][295 ms][DEBUG] START check_boot_completed [2025-09-06 17:11:11][351477979308702][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:11:11][351477979308702][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:11:11][351477979308702][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:11:11][351477979308702][404 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 17:11:11][351477979308702][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 17:11:11][351477979308702][404 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:11:11][351477979308702][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979308702\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6246\"}'\'' -e'"" [2025-09-06 17:11:11][351477979308702][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:11:11][351477979308702][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979308702\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6246\"}'\'' -e'"" [2025-09-06 17:11:16][351477979308702][5387 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04f6998b-de0c-4102-a112-2efbc7bb2732","id":"QR_04f6998b-de0c-4102-a112-2efbc7bb2732","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:11:17][351477979308702][5543 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-09-06 17:11:17][351477979308702][5543 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-09-06 17:11:17][351477979308702][5543 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:14:03][357962508470697][1 ms][INFO] === Request start === [2025-09-06 17:14:03][357962508470697][1 ms][DEBUG] START check_scloud [2025-09-06 17:14:03][357962508470697][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:14:03][357962508470697][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 31107 4991 25018248 241216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:14:03][357962508470697][303 ms][DEBUG] targetPkg: running [2025-09-06 17:14:03][357962508470697][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 17:14:03][357962508470697][303 ms][DEBUG] START check_boot_completed [2025-09-06 17:14:03][357962508470697][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:14:03][357962508470697][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 17:14:03][357962508470697][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:14:03][357962508470697][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:14:03][357962508470697][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 17:14:03][357962508470697][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:14:03][357962508470697][491 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4395\nsuccessfulTxPacketsPerSecond: 0.3278935259842181\nretriedTxPackets: 1017\nretriedTxPacketsPerSecond: 0.11825668150250489\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3993\nsuccessfulRxPacketsPerSecond: 0.274140488937625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:14:03][357962508470697][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:14:05][357962508470697][1818 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.385/300.385/300.385/0.000 ms\n [2025-09-06 17:14:05][357962508470697][1819 ms][DEBUG] check_internet: online [2025-09-06 17:14:05][357962508470697][1819 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:14:05][357962508470697][1819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508470697\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3316\"}'\'' -e'"" [2025-09-06 17:14:05][357962508470697][1819 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:14:05][357962508470697][1819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508470697\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3316\"}'\'' -e'"" [2025-09-06 17:14:09][357962508470697][5583 ms][DEBUG] proc_open done in 3764 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 17:14:09][357962508470697][5583 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-06 17:14:09][357962508470697][5583 ms][WARN] Detected error: Process with pid 31107 either refused to load frida-agent, or terminated during injectionProcess with pid 31107 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 17:14:09][357962508470697][5583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 17:14:09][357962508470697][5866 ms][DEBUG] SU: done in 283 ms; outsystem 5412 4991 12887328 207800 ep_poll 0 S system_server\n [2025-09-06 17:14:09][357962508470697][5866 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 17:14:09][357962508470697][6021 ms][DEBUG] SU: done in 155 ms; out [2025-09-06 17:14:09][357962508470697][6021 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 17:14:09][357962508470697][6021 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 17:14:09][357962508470697][6146 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 17:14:09][357962508470697][6146 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 17:14:09][357962508470697][6302 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 17:14:11][357962508470697][8317 ms][DEBUG] START check_boot_completed [2025-09-06 17:14:11][357962508470697][8317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:14:11][357962508470697][8364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:14:11][357962508470697][8364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:14:11][357962508470697][8411 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:14:11][357962508470697][8411 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 17:14:14][357962508470697][11425 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 17:14:14][357962508470697][11425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508470697\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3316\"}'\'' -e'"" [2025-09-06 17:14:18][357962508470697][15299 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f372a085-f9d4-442d-adea-af1761268258","id":"QR_f372a085-f9d4-442d-adea-af1761268258","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:14:18][357962508470697][15456 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-09-06 17:14:18][357962508470697][15456 ms][DEBUG] END runCmdUntilRes#2 in 4030 ms [2025-09-06 17:14:18][357962508470697][15456 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:14:21][357962508470697][0 ms][INFO] === Request start === [2025-09-06 17:14:21][357962508470697][1 ms][DEBUG] START check_scloud [2025-09-06 17:14:21][357962508470697][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:14:21][357962508470697][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 373 4991 23704192 124660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:14:21][357962508470697][256 ms][DEBUG] targetPkg: running [2025-09-06 17:14:21][357962508470697][256 ms][DEBUG] END check_scloud in 256 ms [2025-09-06 17:14:21][357962508470697][257 ms][DEBUG] START check_boot_completed [2025-09-06 17:14:21][357962508470697][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:14:21][357962508470697][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:14:21][357962508470697][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:14:21][357962508470697][350 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:14:21][357962508470697][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:14:21][357962508470697][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:14:21][357962508470697][444 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4395\nsuccessfulTxPacketsPerSecond: 0.3278935259842181\nretriedTxPackets: 1017\nretriedTxPacketsPerSecond: 0.11825668150250489\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3993\nsuccessfulRxPacketsPerSecond: 0.274140488937625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:14:21][357962508470697][444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:14:22][357962508470697][787 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.961/253.961/253.961/0.000 ms\n [2025-09-06 17:14:22][357962508470697][787 ms][DEBUG] check_internet: online [2025-09-06 17:14:22][357962508470697][787 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:14:22][357962508470697][787 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508470697\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4004\"}'\'' -e'"" [2025-09-06 17:14:22][357962508470697][787 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:14:22][357962508470697][787 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508470697\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4004\"}'\'' -e'"" [2025-09-06 17:14:27][357962508470697][6130 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64d58247-1571-448f-9c3f-dc30a5fa6acf","id":"QR_64d58247-1571-448f-9c3f-dc30a5fa6acf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:14:27][357962508470697][6286 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-06 17:14:27][357962508470697][6286 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-09-06 17:14:27][357962508470697][6286 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:14:33][357709570197355][0 ms][INFO] === Request start === [2025-09-06 17:14:33][357709570197355][1 ms][DEBUG] START check_scloud [2025-09-06 17:14:33][357709570197355][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:14:33][357709570197355][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 373 4991 23849684 137472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:14:33][357709570197355][263 ms][DEBUG] targetPkg: running [2025-09-06 17:14:33][357709570197355][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-06 17:14:33][357709570197355][263 ms][DEBUG] START check_boot_completed [2025-09-06 17:14:33][357709570197355][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:14:33][357709570197355][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:14:33][357709570197355][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:14:33][357709570197355][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:14:33][357709570197355][357 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 17:14:33][357709570197355][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:14:33][357709570197355][466 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4395\nsuccessfulTxPacketsPerSecond: 0.3278935259842181\nretriedTxPackets: 1017\nretriedTxPacketsPerSecond: 0.11825668150250489\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3993\nsuccessfulRxPacketsPerSecond: 0.274140488937625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:14:33][357709570197355][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:14:34][357709570197355][856 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=285 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 285.249/285.249/285.249/0.000 ms\n [2025-09-06 17:14:34][357709570197355][856 ms][DEBUG] check_internet: online [2025-09-06 17:14:34][357709570197355][856 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:14:34][357709570197355][856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357709570197355\",\"model\":\"SM-F721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7825\"}'\'' -e'"" [2025-09-06 17:14:34][357709570197355][857 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:14:34][357709570197355][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357709570197355\",\"model\":\"SM-F721B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7825\"}'\'' -e'"" [2025-09-06 17:14:40][357709570197355][6839 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_887c7808-c539-4ea6-82e2-fb1f84931d53","id":"QR_887c7808-c539-4ea6-82e2-fb1f84931d53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:14:40][357709570197355][6995 ms][DEBUG] proc_open done in 6139 ms; code=255; res.len=3343 [2025-09-06 17:14:40][357709570197355][6996 ms][DEBUG] END runCmdUntilRes#1 in 6139 ms [2025-09-06 17:14:40][357709570197355][6996 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:14:44][357709570197355][0 ms][INFO] === Request start === [2025-09-06 17:14:44][357709570197355][1 ms][DEBUG] START check_scloud [2025-09-06 17:14:44][357709570197355][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:14:45][357709570197355][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 373 4991 23873256 149812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:14:45][357709570197355][264 ms][DEBUG] targetPkg: running [2025-09-06 17:14:45][357709570197355][264 ms][DEBUG] END check_scloud in 263 ms [2025-09-06 17:14:45][357709570197355][264 ms][DEBUG] START check_boot_completed [2025-09-06 17:14:45][357709570197355][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:14:45][357709570197355][310 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:14:45][357709570197355][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:14:45][357709570197355][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:14:45][357709570197355][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:14:45][357709570197355][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:14:45][357709570197355][467 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4395\nsuccessfulTxPacketsPerSecond: 0.3278935259842181\nretriedTxPackets: 1017\nretriedTxPacketsPerSecond: 0.11825668150250489\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3993\nsuccessfulRxPacketsPerSecond: 0.274140488937625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:14:45][357709570197355][467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:14:45][357709570197355][920 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=346 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 346.743/346.743/346.743/0.000 ms\n [2025-09-06 17:14:45][357709570197355][920 ms][DEBUG] check_internet: online [2025-09-06 17:14:45][357709570197355][920 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:14:45][357709570197355][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357709570197355\",\"model\":\"SM-F721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5356\"}'\'' -e'"" [2025-09-06 17:14:45][357709570197355][920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:14:45][357709570197355][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357709570197355\",\"model\":\"SM-F721B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5356\"}'\'' -e'"" [2025-09-06 17:14:49][357709570197355][4763 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6bfa37f4-8ada-4611-952c-9d2e5958cdf1","id":"QR_6bfa37f4-8ada-4611-952c-9d2e5958cdf1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:14:49][357709570197355][4919 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-06 17:14:49][357709570197355][4919 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-09-06 17:14:49][357709570197355][4919 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:15:05][356263313263786][0 ms][INFO] === Request start === [2025-09-06 17:15:05][356263313263786][1 ms][DEBUG] START check_scloud [2025-09-06 17:15:05][356263313263786][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:15:05][356263313263786][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 373 4991 23966568 160968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:15:05][356263313263786][312 ms][DEBUG] targetPkg: running [2025-09-06 17:15:05][356263313263786][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 17:15:05][356263313263786][312 ms][DEBUG] START check_boot_completed [2025-09-06 17:15:05][356263313263786][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:15:05][356263313263786][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:15:05][356263313263786][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:15:05][356263313263786][408 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 17:15:05][356263313263786][408 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-06 17:15:05][356263313263786][408 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:15:05][356263313263786][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356263313263786\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2891\"}'\'' -e'"" [2025-09-06 17:15:05][356263313263786][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:15:05][356263313263786][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356263313263786\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2891\"}'\'' -e'"" [2025-09-06 17:15:11][356263313263786][6701 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5bc69ca6-b733-4dfd-9fbd-bb2fb7b2382c","id":"QR_5bc69ca6-b733-4dfd-9fbd-bb2fb7b2382c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:15:12][356263313263786][6857 ms][DEBUG] proc_open done in 6449 ms; code=255; res.len=3343 [2025-09-06 17:15:12][356263313263786][6858 ms][DEBUG] END runCmdUntilRes#1 in 6449 ms [2025-09-06 17:15:12][356263313263786][6858 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:15:15][356263313263786][0 ms][INFO] === Request start === [2025-09-06 17:15:15][356263313263786][1 ms][DEBUG] START check_scloud [2025-09-06 17:15:15][356263313263786][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:15:16][356263313263786][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 373 4991 24094768 171428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:15:16][356263313263786][260 ms][DEBUG] targetPkg: running [2025-09-06 17:15:16][356263313263786][260 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 17:15:16][356263313263786][261 ms][DEBUG] START check_boot_completed [2025-09-06 17:15:16][356263313263786][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:15:16][356263313263786][307 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:15:16][356263313263786][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:15:16][356263313263786][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:15:16][356263313263786][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:15:16][356263313263786][354 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:15:16][356263313263786][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356263313263786\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2420\"}'\'' -e'"" [2025-09-06 17:15:16][356263313263786][354 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:15:16][356263313263786][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356263313263786\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2420\"}'\'' -e'"" [2025-09-06 17:15:22][356263313263786][6321 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ebf86cf1-61e5-4993-bdcd-95c3be12f469","id":"QR_ebf86cf1-61e5-4993-bdcd-95c3be12f469","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:15:22][356263313263786][6477 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-09-06 17:15:22][356263313263786][6477 ms][DEBUG] END runCmdUntilRes#1 in 6124 ms [2025-09-06 17:15:22][356263313263786][6477 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:15:24][359461656651222][0 ms][INFO] === Request start === [2025-09-06 17:15:24][359461656651222][1 ms][DEBUG] START check_scloud [2025-09-06 17:15:24][359461656651222][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:15:24][359461656651222][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 373 4991 24253752 183288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:15:24][359461656651222][258 ms][DEBUG] targetPkg: running [2025-09-06 17:15:24][359461656651222][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-06 17:15:24][359461656651222][258 ms][DEBUG] START check_boot_completed [2025-09-06 17:15:24][359461656651222][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:15:24][359461656651222][305 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:15:24][359461656651222][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:15:24][359461656651222][383 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 17:15:24][359461656651222][383 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 17:15:24][359461656651222][383 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:15:24][359461656651222][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359461656651222\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3135\"}'\'' -e'"" [2025-09-06 17:15:24][359461656651222][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:15:24][359461656651222][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359461656651222\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3135\"}'\'' -e'"" [2025-09-06 17:15:28][359461656651222][4147 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27d13e6a-90c6-4ca8-a51d-08d020939904","id":"QR_27d13e6a-90c6-4ca8-a51d-08d020939904","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:15:28][359461656651222][4303 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-06 17:15:28][359461656651222][4303 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-06 17:15:28][359461656651222][4304 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:15:32][359461656651222][0 ms][INFO] === Request start === [2025-09-06 17:15:32][359461656651222][1 ms][DEBUG] START check_scloud [2025-09-06 17:15:32][359461656651222][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:15:32][359461656651222][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 373 4991 24404508 194396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:15:32][359461656651222][247 ms][DEBUG] targetPkg: running [2025-09-06 17:15:32][359461656651222][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-06 17:15:32][359461656651222][247 ms][DEBUG] START check_boot_completed [2025-09-06 17:15:32][359461656651222][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:15:32][359461656651222][293 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:15:32][359461656651222][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:15:33][359461656651222][340 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:15:33][359461656651222][340 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:15:33][359461656651222][340 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:15:33][359461656651222][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359461656651222\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4181\"}'\'' -e'"" [2025-09-06 17:15:33][359461656651222][340 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:15:33][359461656651222][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359461656651222\",\"model\":\"SM-A525F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4181\"}'\'' -e'"" [2025-09-06 17:15:38][359461656651222][5698 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_318537e9-b7f5-4a9d-9876-54469633fbcc","id":"QR_318537e9-b7f5-4a9d-9876-54469633fbcc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:15:38][359461656651222][5854 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-06 17:15:38][359461656651222][5854 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-06 17:15:38][359461656651222][5854 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:16:05][350121672887189][1 ms][INFO] === Request start === [2025-09-06 17:16:05][350121672887189][1 ms][DEBUG] START check_scloud [2025-09-06 17:16:05][350121672887189][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:16:05][350121672887189][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 373 4991 24503992 206580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:16:05][350121672887189][297 ms][DEBUG] targetPkg: running [2025-09-06 17:16:05][350121672887189][298 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 17:16:05][350121672887189][298 ms][DEBUG] START check_boot_completed [2025-09-06 17:16:05][350121672887189][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:16:05][350121672887189][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:16:05][350121672887189][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:16:05][350121672887189][392 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 17:16:05][350121672887189][393 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 17:16:05][350121672887189][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:16:05][350121672887189][532 ms][DEBUG] SU: done in 139 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4395\nsuccessfulTxPacketsPerSecond: 0.3278935259842181\nretriedTxPackets: 1017\nretriedTxPacketsPerSecond: 0.11825668150250489\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3993\nsuccessfulRxPacketsPerSecond: 0.274140488937625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:16:05][350121672887189][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:16:06][350121672887189][922 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.016/292.016/292.016/0.000 ms\n [2025-09-06 17:16:06][350121672887189][922 ms][DEBUG] check_internet: online [2025-09-06 17:16:06][350121672887189][922 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:16:06][350121672887189][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121672887189\",\"model\":\"SM-G998U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6154\"}'\'' -e'"" [2025-09-06 17:16:06][350121672887189][923 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:16:06][350121672887189][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121672887189\",\"model\":\"SM-G998U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6154\"}'\'' -e'"" [2025-09-06 17:16:11][350121672887189][6077 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0efecc1-8724-4176-95d5-e3a0d714ca45","id":"QR_b0efecc1-8724-4176-95d5-e3a0d714ca45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:16:11][350121672887189][6233 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-06 17:16:11][350121672887189][6233 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 17:16:11][350121672887189][6233 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:16:16][350121672887189][0 ms][INFO] === Request start === [2025-09-06 17:16:16][350121672887189][1 ms][DEBUG] START check_scloud [2025-09-06 17:16:16][350121672887189][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:16:16][350121672887189][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 373 4991 24651508 217352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:16:16][350121672887189][265 ms][DEBUG] targetPkg: running [2025-09-06 17:16:16][350121672887189][265 ms][DEBUG] END check_scloud in 264 ms [2025-09-06 17:16:16][350121672887189][265 ms][DEBUG] START check_boot_completed [2025-09-06 17:16:16][350121672887189][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:16:16][350121672887189][296 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 17:16:16][350121672887189][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:16:16][350121672887189][344 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 17:16:16][350121672887189][344 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 17:16:16][350121672887189][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:16:16][350121672887189][452 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4395\nsuccessfulTxPacketsPerSecond: 0.3278935259842181\nretriedTxPackets: 1017\nretriedTxPacketsPerSecond: 0.11825668150250489\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3993\nsuccessfulRxPacketsPerSecond: 0.274140488937625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:16:16][350121672887189][452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:16:17][350121672887189][890 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=341 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 341.157/341.157/341.157/0.000 ms\n [2025-09-06 17:16:17][350121672887189][890 ms][DEBUG] check_internet: online [2025-09-06 17:16:17][350121672887189][890 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:16:17][350121672887189][890 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121672887189\",\"model\":\"SM-G998U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1706\"}'\'' -e'"" [2025-09-06 17:16:17][350121672887189][890 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:16:17][350121672887189][890 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121672887189\",\"model\":\"SM-G998U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1706\"}'\'' -e'"" [2025-09-06 17:16:24][350121672887189][7779 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4f75bf0-1d5e-4ed2-bc9b-b2c1e48e5753","id":"QR_f4f75bf0-1d5e-4ed2-bc9b-b2c1e48e5753","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:16:24][350121672887189][7935 ms][DEBUG] proc_open done in 7045 ms; code=255; res.len=3343 [2025-09-06 17:16:24][350121672887189][7935 ms][DEBUG] END runCmdUntilRes#1 in 7045 ms [2025-09-06 17:16:24][350121672887189][7935 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:16:27][358997697719180][0 ms][INFO] === Request start === [2025-09-06 17:16:27][358997697719180][1 ms][DEBUG] START check_scloud [2025-09-06 17:16:27][358997697719180][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:16:27][358997697719180][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 373 4991 24814552 229660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:16:27][358997697719180][294 ms][DEBUG] targetPkg: running [2025-09-06 17:16:27][358997697719180][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 17:16:27][358997697719180][295 ms][DEBUG] START check_boot_completed [2025-09-06 17:16:27][358997697719180][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:16:27][358997697719180][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:16:27][358997697719180][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:16:27][358997697719180][435 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 17:16:27][358997697719180][435 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 17:16:27][358997697719180][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:16:27][358997697719180][560 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4395\nsuccessfulTxPacketsPerSecond: 0.3278935259842181\nretriedTxPackets: 1017\nretriedTxPacketsPerSecond: 0.11825668150250489\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3993\nsuccessfulRxPacketsPerSecond: 0.274140488937625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:16:27][358997697719180][560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:16:28][358997697719180][997 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=312 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 312.235/312.235/312.235/0.000 ms\n [2025-09-06 17:16:28][358997697719180][997 ms][DEBUG] check_internet: online [2025-09-06 17:16:28][358997697719180][997 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:16:28][358997697719180][997 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997697719180\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2730\"}'\'' -e'"" [2025-09-06 17:16:28][358997697719180][997 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:16:28][358997697719180][998 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997697719180\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2730\"}'\'' -e'"" [2025-09-06 17:16:33][358997697719180][5636 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bec4917e-4eb1-431c-956c-909e8ddd20a2","id":"QR_bec4917e-4eb1-431c-956c-909e8ddd20a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:16:33][358997697719180][5793 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 17:16:33][358997697719180][5793 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-06 17:16:33][358997697719180][5793 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:16:36][358997697719180][0 ms][INFO] === Request start === [2025-09-06 17:16:36][358997697719180][0 ms][DEBUG] START check_scloud [2025-09-06 17:16:36][358997697719180][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:16:37][358997697719180][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 373 4991 24989792 241428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:16:37][358997697719180][300 ms][DEBUG] targetPkg: running [2025-09-06 17:16:37][358997697719180][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 17:16:37][358997697719180][300 ms][DEBUG] START check_boot_completed [2025-09-06 17:16:37][358997697719180][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:16:37][358997697719180][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 17:16:37][358997697719180][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:16:37][358997697719180][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:16:37][358997697719180][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 17:16:37][358997697719180][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:16:37][358997697719180][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4395\nsuccessfulTxPacketsPerSecond: 0.3278935259842181\nretriedTxPackets: 1017\nretriedTxPacketsPerSecond: 0.11825668150250489\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3993\nsuccessfulRxPacketsPerSecond: 0.274140488937625\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:16:37][358997697719180][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:16:37][358997697719180][877 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=297 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 297.270/297.270/297.270/0.000 ms\n [2025-09-06 17:16:37][358997697719180][877 ms][DEBUG] check_internet: online [2025-09-06 17:16:37][358997697719180][877 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:16:37][358997697719180][877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997697719180\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6032\"}'\'' -e'"" [2025-09-06 17:16:37][358997697719180][878 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:16:37][358997697719180][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997697719180\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6032\"}'\'' -e'"" [2025-09-06 17:16:41][358997697719180][4611 ms][DEBUG] proc_open done in 3734 ms (timeout); code=4; out.len=0 err.len=89 [2025-09-06 17:16:41][358997697719180][4611 ms][DEBUG] END runCmdUntilRes#1 in 3734 ms [2025-09-06 17:16:41][358997697719180][4611 ms][WARN] Detected error: Process with pid 373 either refused to load frida-agent, or terminated during injectionProcess with pid 373 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 17:16:41][358997697719180][4611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 17:16:41][358997697719180][4877 ms][DEBUG] SU: done in 266 ms; outsystem 5412 4991 12887328 196852 ep_poll 0 S system_server\n [2025-09-06 17:16:41][358997697719180][4877 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 17:16:41][358997697719180][5017 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 17:16:41][358997697719180][5017 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 17:16:41][358997697719180][5017 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 17:16:41][358997697719180][5128 ms][DEBUG] SU: done in 111 ms; out [2025-09-06 17:16:41][358997697719180][5128 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 17:16:42][358997697719180][5283 ms][DEBUG] SU: done in 155 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 17:16:44][358997697719180][7298 ms][DEBUG] START check_boot_completed [2025-09-06 17:16:44][358997697719180][7298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:16:44][358997697719180][7345 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:16:44][358997697719180][7345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:16:44][358997697719180][7407 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 17:16:44][358997697719180][7407 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 17:16:47][358997697719180][10422 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 17:16:47][358997697719180][10422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997697719180\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6032\"}'\'' -e'"" [2025-09-06 17:16:52][358997697719180][15140 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ffc7af08-4275-4e14-8dde-eed2148335f5","id":"QR_ffc7af08-4275-4e14-8dde-eed2148335f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:16:52][358997697719180][15296 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-09-06 17:16:52][358997697719180][15296 ms][DEBUG] END runCmdUntilRes#2 in 4874 ms [2025-09-06 17:16:52][358997697719180][15296 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:25:05][356127101984830][1 ms][INFO] === Request start === [2025-09-06 17:25:05][356127101984830][1 ms][DEBUG] START check_scloud [2025-09-06 17:25:05][356127101984830][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:25:06][356127101984830][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 1811 4991 23643992 126956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:25:06][356127101984830][308 ms][DEBUG] targetPkg: running [2025-09-06 17:25:06][356127101984830][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 17:25:06][356127101984830][308 ms][DEBUG] START check_boot_completed [2025-09-06 17:25:06][356127101984830][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:25:06][356127101984830][355 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:25:06][356127101984830][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:25:06][356127101984830][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:25:06][356127101984830][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:25:06][356127101984830][402 ms][DEBUG] rawBody.length=1170 [2025-09-06 17:25:06][356127101984830][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356127101984830\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W700F2FR\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5311\"}'\'' -e'"" [2025-09-06 17:25:06][356127101984830][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:25:06][356127101984830][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356127101984830\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W700F2FR\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5311\"}'\'' -e'"" [2025-09-06 17:25:11][356127101984830][5963 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_392284d9-beb0-43fb-96aa-ea14949737db","id":"QR_392284d9-beb0-43fb-96aa-ea14949737db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:25:11][356127101984830][6119 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-06 17:25:11][356127101984830][6119 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-06 17:25:11][356127101984830][6120 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:25:16][353684142917982][0 ms][INFO] === Request start === [2025-09-06 17:25:16][353684142917982][1 ms][DEBUG] START check_scloud [2025-09-06 17:25:16][353684142917982][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:25:16][353684142917982][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 1811 4991 23793772 137780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:25:16][353684142917982][252 ms][DEBUG] targetPkg: running [2025-09-06 17:25:16][353684142917982][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-06 17:25:16][353684142917982][252 ms][DEBUG] START check_boot_completed [2025-09-06 17:25:16][353684142917982][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:25:16][353684142917982][298 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:25:16][353684142917982][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:25:17][353684142917982][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:25:17][353684142917982][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:25:17][353684142917982][346 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:25:17][353684142917982][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142917982\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3532\"}'\'' -e'"" [2025-09-06 17:25:17][353684142917982][346 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:25:17][353684142917982][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142917982\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3532\"}'\'' -e'"" [2025-09-06 17:25:21][353684142917982][4781 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f134b302-1588-4977-b3f0-934936cd6267","id":"QR_f134b302-1588-4977-b3f0-934936cd6267","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:25:21][353684142917982][4937 ms][DEBUG] proc_open done in 4591 ms; code=255; res.len=3343 [2025-09-06 17:25:21][353684142917982][4937 ms][DEBUG] END runCmdUntilRes#1 in 4591 ms [2025-09-06 17:25:21][353684142917982][4937 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:25:24][353684142917982][0 ms][INFO] === Request start === [2025-09-06 17:25:24][353684142917982][1 ms][DEBUG] START check_scloud [2025-09-06 17:25:24][353684142917982][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:25:24][353684142917982][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 1811 4991 23958836 149580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:25:24][353684142917982][286 ms][DEBUG] targetPkg: running [2025-09-06 17:25:24][353684142917982][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 17:25:24][353684142917982][286 ms][DEBUG] START check_boot_completed [2025-09-06 17:25:24][353684142917982][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:25:24][353684142917982][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:25:24][353684142917982][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:25:24][353684142917982][395 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 17:25:24][353684142917982][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 17:25:24][353684142917982][395 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:25:24][353684142917982][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142917982\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8845\"}'\'' -e'"" [2025-09-06 17:25:24][353684142917982][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:25:24][353684142917982][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142917982\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8845\"}'\'' -e'"" [2025-09-06 17:25:31][353684142917982][7596 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4756fbb7-8d22-4d27-a1f8-11286fe1b6f3","id":"QR_4756fbb7-8d22-4d27-a1f8-11286fe1b6f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:25:31][353684142917982][7752 ms][DEBUG] proc_open done in 7357 ms; code=255; res.len=3343 [2025-09-06 17:25:31][353684142917982][7752 ms][DEBUG] END runCmdUntilRes#1 in 7357 ms [2025-09-06 17:25:31][353684142917982][7752 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:27:03][357879701211902][0 ms][INFO] === Request start === [2025-09-06 17:27:03][357879701211902][1 ms][DEBUG] START check_scloud [2025-09-06 17:27:03][357879701211902][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:27:04][357879701211902][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 1811 4991 24052176 160840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:27:04][357879701211902][299 ms][DEBUG] targetPkg: running [2025-09-06 17:27:04][357879701211902][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 17:27:04][357879701211902][299 ms][DEBUG] START check_boot_completed [2025-09-06 17:27:04][357879701211902][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:27:04][357879701211902][344 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 17:27:04][357879701211902][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:27:04][357879701211902][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:27:04][357879701211902][391 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 17:27:04][357879701211902][391 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:27:04][357879701211902][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879701211902\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5824\"}'\'' -e'"" [2025-09-06 17:27:04][357879701211902][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:27:04][357879701211902][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879701211902\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5824\"}'\'' -e'"" [2025-09-06 17:27:09][357879701211902][5358 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dfc04939-c580-44da-9eb4-a2cda6acd75d","id":"QR_dfc04939-c580-44da-9eb4-a2cda6acd75d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:27:09][357879701211902][5514 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-06 17:27:09][357879701211902][5515 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-06 17:27:09][357879701211902][5515 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:27:11][357879701211902][1 ms][INFO] === Request start === [2025-09-06 17:27:11][357879701211902][1 ms][DEBUG] START check_scloud [2025-09-06 17:27:11][357879701211902][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:27:12][357879701211902][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 1811 4991 24229532 171524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:27:12][357879701211902][313 ms][DEBUG] targetPkg: running [2025-09-06 17:27:12][357879701211902][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 17:27:12][357879701211902][313 ms][DEBUG] START check_boot_completed [2025-09-06 17:27:12][357879701211902][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:27:12][357879701211902][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:27:12][357879701211902][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:27:12][357879701211902][438 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 17:27:12][357879701211902][438 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 17:27:12][357879701211902][438 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:27:12][357879701211902][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879701211902\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7632\"}'\'' -e'"" [2025-09-06 17:27:12][357879701211902][438 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:27:12][357879701211902][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879701211902\",\"model\":\"SM-N981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7632\"}'\'' -e'"" [2025-09-06 17:27:18][357879701211902][6015 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a6c2b82-7963-456e-9677-c65a618efc9c","id":"QR_1a6c2b82-7963-456e-9677-c65a618efc9c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:27:18][357879701211902][6171 ms][DEBUG] proc_open done in 5733 ms; code=255; res.len=3343 [2025-09-06 17:27:18][357879701211902][6171 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-09-06 17:27:18][357879701211902][6171 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:28:04][359482510542027][0 ms][INFO] === Request start === [2025-09-06 17:28:04][359482510542027][1 ms][DEBUG] START check_scloud [2025-09-06 17:28:04][359482510542027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:28:05][359482510542027][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 1811 4991 24367964 183636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:28:05][359482510542027][257 ms][DEBUG] targetPkg: running [2025-09-06 17:28:05][359482510542027][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-06 17:28:05][359482510542027][257 ms][DEBUG] START check_boot_completed [2025-09-06 17:28:05][359482510542027][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:28:05][359482510542027][304 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:28:05][359482510542027][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:28:05][359482510542027][397 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 17:28:05][359482510542027][398 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 17:28:05][359482510542027][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:28:05][359482510542027][554 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4789\nsuccessfulTxPacketsPerSecond: 0.26467066254813293\nretriedTxPackets: 1149\nretriedTxPacketsPerSecond: 0.0871476571804828\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4310\nsuccessfulRxPacketsPerSecond: 0.22271067946123382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:28:05][359482510542027][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:28:06][359482510542027][1944 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.316/299.316/299.316/0.000 ms\n [2025-09-06 17:28:06][359482510542027][1944 ms][DEBUG] check_internet: online [2025-09-06 17:28:06][359482510542027][1944 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:28:06][359482510542027][1944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359482510542027\",\"model\":\"SM-F956U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3578\"}'\'' -e'"" [2025-09-06 17:28:06][359482510542027][1944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:28:06][359482510542027][1944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359482510542027\",\"model\":\"SM-F956U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3578\"}'\'' -e'"" [2025-09-06 17:28:13][359482510542027][8520 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb7a3d46-40a1-44fe-8f8b-4b08dd0e8b53","id":"QR_eb7a3d46-40a1-44fe-8f8b-4b08dd0e8b53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:28:13][359482510542027][8677 ms][DEBUG] proc_open done in 6732 ms; code=255; res.len=3343 [2025-09-06 17:28:13][359482510542027][8677 ms][DEBUG] END runCmdUntilRes#1 in 6732 ms [2025-09-06 17:28:13][359482510542027][8677 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:28:17][359482510542027][0 ms][INFO] === Request start === [2025-09-06 17:28:17][359482510542027][1 ms][DEBUG] START check_scloud [2025-09-06 17:28:17][359482510542027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:28:17][359482510542027][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 1811 4991 24518244 194704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:28:17][359482510542027][291 ms][DEBUG] targetPkg: running [2025-09-06 17:28:17][359482510542027][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-06 17:28:17][359482510542027][291 ms][DEBUG] START check_boot_completed [2025-09-06 17:28:17][359482510542027][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:28:17][359482510542027][337 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:28:17][359482510542027][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:28:17][359482510542027][416 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 17:28:17][359482510542027][416 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 17:28:17][359482510542027][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:28:17][359482510542027][541 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4789\nsuccessfulTxPacketsPerSecond: 0.26467066254813293\nretriedTxPackets: 1149\nretriedTxPacketsPerSecond: 0.0871476571804828\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4310\nsuccessfulRxPacketsPerSecond: 0.22271067946123382\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:28:17][359482510542027][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:28:18][359482510542027][900 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.361/227.361/227.361/0.000 ms\n [2025-09-06 17:28:18][359482510542027][900 ms][DEBUG] check_internet: online [2025-09-06 17:28:18][359482510542027][900 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:28:18][359482510542027][900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359482510542027\",\"model\":\"SM-F956U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7205\"}'\'' -e'"" [2025-09-06 17:28:18][359482510542027][900 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:28:18][359482510542027][900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359482510542027\",\"model\":\"SM-F956U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7205\"}'\'' -e'"" [2025-09-06 17:28:26][359482510542027][9257 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_84905d69-8605-4254-ac2e-6064869f9634","id":"QR_84905d69-8605-4254-ac2e-6064869f9634","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:28:26][359482510542027][9413 ms][DEBUG] proc_open done in 8513 ms; code=255; res.len=3343 [2025-09-06 17:28:26][359482510542027][9413 ms][DEBUG] END runCmdUntilRes#1 in 8513 ms [2025-09-06 17:28:26][359482510542027][9414 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:37:03][351978520627771][1 ms][INFO] === Request start === [2025-09-06 17:37:03][351978520627771][1 ms][DEBUG] START check_scloud [2025-09-06 17:37:03][351978520627771][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:37:04][351978520627771][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 1811 4991 24651508 207344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:37:04][351978520627771][253 ms][DEBUG] targetPkg: running [2025-09-06 17:37:04][351978520627771][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-06 17:37:04][351978520627771][253 ms][DEBUG] START check_boot_completed [2025-09-06 17:37:04][351978520627771][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:37:04][351978520627771][300 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:37:04][351978520627771][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:37:04][351978520627771][378 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 17:37:04][351978520627771][378 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 17:37:04][351978520627771][378 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:37:04][351978520627771][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520627771\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2410\"}'\'' -e'"" [2025-09-06 17:37:04][351978520627771][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:37:04][351978520627771][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520627771\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2410\"}'\'' -e'"" [2025-09-06 17:37:09][351978520627771][5126 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca8236ae-35e5-4636-bf59-cc26ab33ba93","id":"QR_ca8236ae-35e5-4636-bf59-cc26ab33ba93","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:37:09][351978520627771][5283 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 17:37:09][351978520627771][5283 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-09-06 17:37:09][351978520627771][5283 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:37:11][351978520627771][0 ms][INFO] === Request start === [2025-09-06 17:37:11][351978520627771][1 ms][DEBUG] START check_scloud [2025-09-06 17:37:11][351978520627771][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:37:12][351978520627771][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 1811 4991 24811464 217908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:37:12][351978520627771][257 ms][DEBUG] targetPkg: running [2025-09-06 17:37:12][351978520627771][257 ms][DEBUG] END check_scloud in 256 ms [2025-09-06 17:37:12][351978520627771][257 ms][DEBUG] START check_boot_completed [2025-09-06 17:37:12][351978520627771][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:37:12][351978520627771][302 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 17:37:12][351978520627771][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:37:12][351978520627771][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:37:12][351978520627771][349 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 17:37:12][351978520627771][349 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:37:12][351978520627771][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520627771\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8058\"}'\'' -e'"" [2025-09-06 17:37:12][351978520627771][349 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:37:12][351978520627771][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520627771\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8058\"}'\'' -e'"" [2025-09-06 17:37:17][351978520627771][5535 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83790458-1e4b-4775-9bc7-0801860b484d","id":"QR_83790458-1e4b-4775-9bc7-0801860b484d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:37:17][351978520627771][5691 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-09-06 17:37:17][351978520627771][5691 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-09-06 17:37:17][351978520627771][5691 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:39:03][356414814964584][0 ms][INFO] === Request start === [2025-09-06 17:39:03][356414814964584][1 ms][DEBUG] START check_scloud [2025-09-06 17:39:03][356414814964584][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:39:04][356414814964584][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 1811 4991 24902536 229788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:39:04][356414814964584][306 ms][DEBUG] targetPkg: running [2025-09-06 17:39:04][356414814964584][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 17:39:04][356414814964584][306 ms][DEBUG] START check_boot_completed [2025-09-06 17:39:04][356414814964584][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:39:04][356414814964584][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:39:04][356414814964584][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:39:04][356414814964584][415 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 17:39:04][356414814964584][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 17:39:04][356414814964584][415 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:39:04][356414814964584][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414814964584\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3160\"}'\'' -e'"" [2025-09-06 17:39:04][356414814964584][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:39:04][356414814964584][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414814964584\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3160\"}'\'' -e'"" [2025-09-06 17:39:08][356414814964584][5070 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec03b796-5386-431a-ad02-2a604e17f82c","id":"QR_ec03b796-5386-431a-ad02-2a604e17f82c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:39:09][356414814964584][5226 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-09-06 17:39:09][356414814964584][5226 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-09-06 17:39:09][356414814964584][5226 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:39:11][356414814964584][1 ms][INFO] === Request start === [2025-09-06 17:39:11][356414814964584][1 ms][DEBUG] START check_scloud [2025-09-06 17:39:11][356414814964584][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:39:11][356414814964584][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 1811 4991 25075856 240668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:39:11][356414814964584][249 ms][DEBUG] targetPkg: running [2025-09-06 17:39:11][356414814964584][249 ms][DEBUG] END check_scloud in 248 ms [2025-09-06 17:39:11][356414814964584][249 ms][DEBUG] START check_boot_completed [2025-09-06 17:39:11][356414814964584][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:39:11][356414814964584][295 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:39:11][356414814964584][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:39:11][356414814964584][341 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:39:11][356414814964584][341 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:39:11][356414814964584][341 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:39:11][356414814964584][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414814964584\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6726\"}'\'' -e'"" [2025-09-06 17:39:11][356414814964584][341 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:39:11][356414814964584][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414814964584\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6726\"}'\'' -e'"" [2025-09-06 17:39:15][356414814964584][4122 ms][DEBUG] proc_open done in 3781 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 17:39:15][356414814964584][4122 ms][DEBUG] END runCmdUntilRes#1 in 3781 ms [2025-09-06 17:39:15][356414814964584][4122 ms][WARN] Detected error: Process with pid 1811 either refused to load frida-agent, or terminated during injectionProcess with pid 1811 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 17:39:15][356414814964584][4122 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 17:39:15][356414814964584][4372 ms][DEBUG] SU: done in 250 ms; outsystem 5412 4991 12776696 183776 ep_poll 0 S system_server\n [2025-09-06 17:39:15][356414814964584][4372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 17:39:16][356414814964584][4512 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 17:39:16][356414814964584][4513 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 17:39:16][356414814964584][4513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 17:39:16][356414814964584][4653 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 17:39:16][356414814964584][4653 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 17:39:16][356414814964584][4825 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 17:39:18][356414814964584][6840 ms][DEBUG] START check_boot_completed [2025-09-06 17:39:18][356414814964584][6840 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:39:18][356414814964584][6871 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 17:39:18][356414814964584][6871 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:39:18][356414814964584][6918 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:39:18][356414814964584][6918 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 17:39:21][356414814964584][9933 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 17:39:21][356414814964584][9933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414814964584\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6726\"}'\'' -e'"" [2025-09-06 17:39:26][356414814964584][15041 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0210ce4d-d09b-4ec6-abfe-3539fd780212","id":"QR_0210ce4d-d09b-4ec6-abfe-3539fd780212","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:39:26][356414814964584][15197 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-06 17:39:26][356414814964584][15197 ms][DEBUG] END runCmdUntilRes#2 in 5265 ms [2025-09-06 17:39:26][356414814964584][15197 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:40:04][350915064474112][0 ms][INFO] === Request start === [2025-09-06 17:40:04][350915064474112][1 ms][DEBUG] START check_scloud [2025-09-06 17:40:04][350915064474112][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:40:05][350915064474112][348 ms][DEBUG] SU: done in 348 ms; outu0_a118 3579 4991 23687156 127444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:40:05][350915064474112][349 ms][DEBUG] targetPkg: running [2025-09-06 17:40:05][350915064474112][349 ms][DEBUG] END check_scloud in 348 ms [2025-09-06 17:40:05][350915064474112][349 ms][DEBUG] START check_boot_completed [2025-09-06 17:40:05][350915064474112][349 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:40:05][350915064474112][395 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:40:05][350915064474112][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:40:05][350915064474112][458 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 17:40:05][350915064474112][459 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 17:40:05][350915064474112][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:40:05][350915064474112][583 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4922\nsuccessfulTxPacketsPerSecond: 0.04647549745380668\nretriedTxPackets: 1202\nretriedTxPacketsPerSecond: 0.039836140674691434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4418\nsuccessfulRxPacketsPerSecond: 0.019918070337345717\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:40:05][350915064474112][583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:40:06][350915064474112][1957 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.801/299.801/299.801/0.000 ms\n [2025-09-06 17:40:06][350915064474112][1958 ms][DEBUG] check_internet: online [2025-09-06 17:40:06][350915064474112][1958 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:40:06][350915064474112][1958 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064474112\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2341\"}'\'' -e'"" [2025-09-06 17:40:06][350915064474112][1958 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:40:06][350915064474112][1958 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064474112\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2341\"}'\'' -e'"" [2025-09-06 17:40:11][350915064474112][7097 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4cc284b-9d56-49cc-acac-cdc87377a414","id":"QR_a4cc284b-9d56-49cc-acac-cdc87377a414","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:40:12][350915064474112][7253 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-06 17:40:12][350915064474112][7253 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-09-06 17:40:12][350915064474112][7253 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:40:15][350915064474112][0 ms][INFO] === Request start === [2025-09-06 17:40:15][350915064474112][1 ms][DEBUG] START check_scloud [2025-09-06 17:40:15][350915064474112][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:40:16][350915064474112][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 3579 4991 23846076 138160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:40:16][350915064474112][298 ms][DEBUG] targetPkg: running [2025-09-06 17:40:16][350915064474112][298 ms][DEBUG] END check_scloud in 297 ms [2025-09-06 17:40:16][350915064474112][298 ms][DEBUG] START check_boot_completed [2025-09-06 17:40:16][350915064474112][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:40:16][350915064474112][343 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 17:40:16][350915064474112][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:40:16][350915064474112][391 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 17:40:16][350915064474112][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 17:40:16][350915064474112][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:40:16][350915064474112][499 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4922\nsuccessfulTxPacketsPerSecond: 0.04647549745380668\nretriedTxPackets: 1202\nretriedTxPacketsPerSecond: 0.039836140674691434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4418\nsuccessfulRxPacketsPerSecond: 0.019918070337345717\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:40:16][350915064474112][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:40:16][350915064474112][921 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=308 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 308.307/308.307/308.307/0.000 ms\n [2025-09-06 17:40:16][350915064474112][921 ms][DEBUG] check_internet: online [2025-09-06 17:40:16][350915064474112][921 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:40:16][350915064474112][921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064474112\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2408\"}'\'' -e'"" [2025-09-06 17:40:16][350915064474112][921 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:40:16][350915064474112][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064474112\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2408\"}'\'' -e'"" [2025-09-06 17:40:20][350915064474112][4889 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_142c8bc7-f47b-4c18-aa34-44a105413a9e","id":"QR_142c8bc7-f47b-4c18-aa34-44a105413a9e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:40:20][350915064474112][5045 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-09-06 17:40:20][350915064474112][5045 ms][DEBUG] END runCmdUntilRes#1 in 4123 ms [2025-09-06 17:40:20][350915064474112][5045 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:42:04][358997691694579][1 ms][INFO] === Request start === [2025-09-06 17:42:04][358997691694579][1 ms][DEBUG] START check_scloud [2025-09-06 17:42:04][358997691694579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:42:05][358997691694579][242 ms][DEBUG] SU: done in 241 ms; outu0_a118 3579 4991 23956720 149680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:42:05][358997691694579][243 ms][DEBUG] targetPkg: running [2025-09-06 17:42:05][358997691694579][243 ms][DEBUG] END check_scloud in 241 ms [2025-09-06 17:42:05][358997691694579][243 ms][DEBUG] START check_boot_completed [2025-09-06 17:42:05][358997691694579][243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:42:05][358997691694579][289 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:42:05][358997691694579][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:42:05][358997691694579][336 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:42:05][358997691694579][336 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:42:05][358997691694579][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:42:05][358997691694579][430 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5091\nsuccessfulTxPacketsPerSecond: 0.5610275102661395\nretriedTxPackets: 1252\nretriedTxPacketsPerSecond: 0.16598447049294068\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4566\nsuccessfulRxPacketsPerSecond: 0.4913140326591044\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:42:05][358997691694579][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:42:05][358997691694579][852 ms][DEBUG] SU: done in 423 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=332 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 332.166/332.166/332.166/0.000 ms\n [2025-09-06 17:42:05][358997691694579][852 ms][DEBUG] check_internet: online [2025-09-06 17:42:05][358997691694579][853 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:42:05][358997691694579][853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997691694579\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3413\"}'\'' -e'"" [2025-09-06 17:42:05][358997691694579][853 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:42:05][358997691694579][853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997691694579\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3413\"}'\'' -e'"" [2025-09-06 17:42:11][358997691694579][6725 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60e0f25d-876b-4ce1-9a03-f2d1295483cc","id":"QR_60e0f25d-876b-4ce1-9a03-f2d1295483cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:42:11][358997691694579][6881 ms][DEBUG] proc_open done in 6028 ms; code=255; res.len=3343 [2025-09-06 17:42:11][358997691694579][6881 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-09-06 17:42:11][358997691694579][6882 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:42:15][358997691694579][0 ms][INFO] === Request start === [2025-09-06 17:42:15][358997691694579][1 ms][DEBUG] START check_scloud [2025-09-06 17:42:15][358997691694579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:42:15][358997691694579][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 3579 4991 24143416 160692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:42:15][358997691694579][252 ms][DEBUG] targetPkg: running [2025-09-06 17:42:15][358997691694579][252 ms][DEBUG] END check_scloud in 251 ms [2025-09-06 17:42:15][358997691694579][252 ms][DEBUG] START check_boot_completed [2025-09-06 17:42:15][358997691694579][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:42:15][358997691694579][298 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:42:15][358997691694579][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:42:15][358997691694579][345 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:42:15][358997691694579][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:42:15][358997691694579][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:42:15][358997691694579][455 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5091\nsuccessfulTxPacketsPerSecond: 0.5610275102661395\nretriedTxPackets: 1252\nretriedTxPacketsPerSecond: 0.16598447049294068\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4566\nsuccessfulRxPacketsPerSecond: 0.4913140326591044\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:42:15][358997691694579][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:42:16][358997691694579][814 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=266 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 266.282/266.282/266.282/0.000 ms\n [2025-09-06 17:42:16][358997691694579][814 ms][DEBUG] check_internet: online [2025-09-06 17:42:16][358997691694579][814 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:42:16][358997691694579][814 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997691694579\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8690\"}'\'' -e'"" [2025-09-06 17:42:16][358997691694579][814 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:42:16][358997691694579][814 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997691694579\",\"model\":\"SM-A136U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8690\"}'\'' -e'"" [2025-09-06 17:42:20][358997691694579][5422 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fd654a6-8f1a-43ca-8c1e-258eedead815","id":"QR_5fd654a6-8f1a-43ca-8c1e-258eedead815","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:42:20][358997691694579][5578 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-06 17:42:20][358997691694579][5578 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-06 17:42:20][358997691694579][5578 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:46:05][352967351465947][1 ms][INFO] === Request start === [2025-09-06 17:46:05][352967351465947][1 ms][DEBUG] START check_scloud [2025-09-06 17:46:05][352967351465947][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:46:05][352967351465947][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 3579 4991 24236728 172008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:46:05][352967351465947][270 ms][DEBUG] targetPkg: running [2025-09-06 17:46:05][352967351465947][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-06 17:46:05][352967351465947][270 ms][DEBUG] START check_boot_completed [2025-09-06 17:46:05][352967351465947][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:46:05][352967351465947][302 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 17:46:05][352967351465947][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:46:05][352967351465947][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:46:05][352967351465947][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 17:46:05][352967351465947][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:46:05][352967351465947][458 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5149\nsuccessfulTxPacketsPerSecond: 0.9843856063527983\nretriedTxPackets: 1270\nretriedTxPacketsPerSecond: 0.3054989812578917\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4617\nsuccessfulRxPacketsPerSecond: 0.8655804469594733\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:46:05][352967351465947][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:46:07][352967351465947][1850 ms][DEBUG] SU: done in 1392 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.797/304.797/304.797/0.000 ms\n [2025-09-06 17:46:07][352967351465947][1850 ms][DEBUG] check_internet: online [2025-09-06 17:46:07][352967351465947][1850 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:46:07][352967351465947][1850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967351465947\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7076\"}'\'' -e'"" [2025-09-06 17:46:07][352967351465947][1850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:46:07][352967351465947][1850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967351465947\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7076\"}'\'' -e'"" [2025-09-06 17:46:12][352967351465947][7112 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02c31a1a-a0e8-4556-802a-1d81c726c4be","id":"QR_02c31a1a-a0e8-4556-802a-1d81c726c4be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:46:12][352967351465947][7269 ms][DEBUG] proc_open done in 5418 ms; code=255; res.len=3343 [2025-09-06 17:46:12][352967351465947][7269 ms][DEBUG] END runCmdUntilRes#1 in 5418 ms [2025-09-06 17:46:12][352967351465947][7269 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:46:16][352967351465947][0 ms][INFO] === Request start === [2025-09-06 17:46:16][352967351465947][1 ms][DEBUG] START check_scloud [2025-09-06 17:46:16][352967351465947][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:46:16][352967351465947][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 3579 4991 24414016 184024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:46:16][352967351465947][261 ms][DEBUG] targetPkg: running [2025-09-06 17:46:16][352967351465947][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 17:46:16][352967351465947][261 ms][DEBUG] START check_boot_completed [2025-09-06 17:46:16][352967351465947][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:46:16][352967351465947][292 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 17:46:16][352967351465947][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:46:16][352967351465947][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:46:16][352967351465947][339 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 17:46:16][352967351465947][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:46:16][352967351465947][433 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5149\nsuccessfulTxPacketsPerSecond: 0.9843856063527983\nretriedTxPackets: 1270\nretriedTxPacketsPerSecond: 0.3054989812578917\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4617\nsuccessfulRxPacketsPerSecond: 0.8655804469594733\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:46:16][352967351465947][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:46:16][352967351465947][761 ms][DEBUG] SU: done in 329 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.113/227.113/227.113/0.000 ms\n [2025-09-06 17:46:16][352967351465947][762 ms][DEBUG] check_internet: online [2025-09-06 17:46:16][352967351465947][762 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:46:16][352967351465947][762 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967351465947\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9955\"}'\'' -e'"" [2025-09-06 17:46:16][352967351465947][762 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:46:16][352967351465947][762 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967351465947\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9955\"}'\'' -e'"" [2025-09-06 17:46:20][352967351465947][4525 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8bc1be3b-fc37-4566-9993-df88d7539bb0","id":"QR_8bc1be3b-fc37-4566-9993-df88d7539bb0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:46:20][352967351465947][4681 ms][DEBUG] proc_open done in 3919 ms; code=255; res.len=3343 [2025-09-06 17:46:20][352967351465947][4681 ms][DEBUG] END runCmdUntilRes#1 in 3919 ms [2025-09-06 17:46:20][352967351465947][4681 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:47:05][356724575804179][0 ms][INFO] === Request start === [2025-09-06 17:47:05][356724575804179][1 ms][DEBUG] START check_scloud [2025-09-06 17:47:05][356724575804179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:47:05][356724575804179][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 3579 4991 24515456 195060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:47:05][356724575804179][279 ms][DEBUG] targetPkg: running [2025-09-06 17:47:05][356724575804179][279 ms][DEBUG] END check_scloud in 278 ms [2025-09-06 17:47:05][356724575804179][279 ms][DEBUG] START check_boot_completed [2025-09-06 17:47:05][356724575804179][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:47:05][356724575804179][325 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:47:05][356724575804179][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:47:05][356724575804179][374 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 17:47:05][356724575804179][374 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 17:47:05][356724575804179][374 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:47:05][356724575804179][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356724575804179\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7322\"}'\'' -e'"" [2025-09-06 17:47:05][356724575804179][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:47:05][356724575804179][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356724575804179\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7322\"}'\'' -e'"" [2025-09-06 17:47:10][356724575804179][5043 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6e15a7a-2b95-430c-a33b-3c21cb4755cc","id":"QR_d6e15a7a-2b95-430c-a33b-3c21cb4755cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:47:10][356724575804179][5199 ms][DEBUG] proc_open done in 4825 ms; code=255; res.len=3343 [2025-09-06 17:47:10][356724575804179][5199 ms][DEBUG] END runCmdUntilRes#1 in 4825 ms [2025-09-06 17:47:10][356724575804179][5199 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:47:13][356724575804179][0 ms][INFO] === Request start === [2025-09-06 17:47:13][356724575804179][1 ms][DEBUG] START check_scloud [2025-09-06 17:47:13][356724575804179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:47:14][356724575804179][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 3579 4991 24694792 206840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:47:14][356724575804179][257 ms][DEBUG] targetPkg: running [2025-09-06 17:47:14][356724575804179][257 ms][DEBUG] END check_scloud in 257 ms [2025-09-06 17:47:14][356724575804179][257 ms][DEBUG] START check_boot_completed [2025-09-06 17:47:14][356724575804179][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:47:14][356724575804179][304 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:47:14][356724575804179][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:47:14][356724575804179][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:47:14][356724575804179][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:47:14][356724575804179][351 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:47:14][356724575804179][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356724575804179\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6700\"}'\'' -e'"" [2025-09-06 17:47:14][356724575804179][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:47:14][356724575804179][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356724575804179\",\"model\":\"SM-S901U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6700\"}'\'' -e'"" [2025-09-06 17:47:17][356724575804179][3913 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d686dce-bef3-408d-a8e8-633554374097","id":"QR_2d686dce-bef3-408d-a8e8-633554374097","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:47:18][356724575804179][4069 ms][DEBUG] proc_open done in 3718 ms; code=255; res.len=3343 [2025-09-06 17:47:18][356724575804179][4069 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-09-06 17:47:18][356724575804179][4069 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:49:04][350182151260843][1 ms][INFO] === Request start === [2025-09-06 17:49:04][350182151260843][1 ms][DEBUG] START check_scloud [2025-09-06 17:49:04][350182151260843][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:49:05][350182151260843][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 3579 4991 24801992 217748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:49:05][350182151260843][316 ms][DEBUG] targetPkg: running [2025-09-06 17:49:05][350182151260843][316 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 17:49:05][350182151260843][316 ms][DEBUG] START check_boot_completed [2025-09-06 17:49:05][350182151260843][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:49:05][350182151260843][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:49:05][350182151260843][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:49:05][350182151260843][440 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 17:49:05][350182151260843][441 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 17:49:05][350182151260843][441 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:49:05][350182151260843][441 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350182151260843\",\"model\":\"SM-A266M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MXO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5232\"}'\'' -e'"" [2025-09-06 17:49:05][350182151260843][441 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:49:05][350182151260843][441 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350182151260843\",\"model\":\"SM-A266M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MXO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5232\"}'\'' -e'"" [2025-09-06 17:49:11][350182151260843][6626 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab0c6aca-ae3d-452c-b5c2-a5d951e66b00","id":"QR_ab0c6aca-ae3d-452c-b5c2-a5d951e66b00","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:49:11][350182151260843][6783 ms][DEBUG] proc_open done in 6342 ms; code=255; res.len=3343 [2025-09-06 17:49:11][350182151260843][6783 ms][DEBUG] END runCmdUntilRes#1 in 6342 ms [2025-09-06 17:49:11][350182151260843][6783 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:49:15][350182151260843][0 ms][INFO] === Request start === [2025-09-06 17:49:15][350182151260843][1 ms][DEBUG] START check_scloud [2025-09-06 17:49:15][350182151260843][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:49:15][350182151260843][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 3579 4991 24979408 229692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:49:15][350182151260843][268 ms][DEBUG] targetPkg: running [2025-09-06 17:49:15][350182151260843][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-06 17:49:15][350182151260843][268 ms][DEBUG] START check_boot_completed [2025-09-06 17:49:15][350182151260843][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:49:15][350182151260843][314 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:49:15][350182151260843][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:49:15][350182151260843][392 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 17:49:15][350182151260843][393 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-06 17:49:15][350182151260843][393 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:49:15][350182151260843][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350182151260843\",\"model\":\"SM-A266M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MXO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3911\"}'\'' -e'"" [2025-09-06 17:49:15][350182151260843][393 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:49:15][350182151260843][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350182151260843\",\"model\":\"SM-A266M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MXO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3911\"}'\'' -e'"" [2025-09-06 17:49:19][350182151260843][4376 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ef22e11-f192-4d17-9167-ed2d040032c4","id":"QR_5ef22e11-f192-4d17-9167-ed2d040032c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:49:19][350182151260843][4532 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-09-06 17:49:19][350182151260843][4532 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-09-06 17:49:19][350182151260843][4532 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:53:04][350536257496314][1 ms][INFO] === Request start === [2025-09-06 17:53:04][350536257496314][1 ms][DEBUG] START check_scloud [2025-09-06 17:53:04][350536257496314][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:53:04][350536257496314][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 3579 4991 25095316 241388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:53:04][350536257496314][304 ms][DEBUG] targetPkg: running [2025-09-06 17:53:04][350536257496314][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 17:53:04][350536257496314][304 ms][DEBUG] START check_boot_completed [2025-09-06 17:53:04][350536257496314][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:53:04][350536257496314][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 17:53:04][350536257496314][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:53:04][350536257496314][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:53:04][350536257496314][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 17:53:04][350536257496314][382 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:53:04][350536257496314][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536257496314\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7644\"}'\'' -e'"" [2025-09-06 17:53:04][350536257496314][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:53:04][350536257496314][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536257496314\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7644\"}'\'' -e'"" [2025-09-06 17:53:08][350536257496314][4084 ms][DEBUG] proc_open done in 3702 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 17:53:08][350536257496314][4084 ms][DEBUG] END runCmdUntilRes#1 in 3703 ms [2025-09-06 17:53:08][350536257496314][4084 ms][WARN] Detected error: Process with pid 3579 either refused to load frida-agent, or terminated during injectionProcess with pid 3579 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 17:53:08][350536257496314][4084 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 17:53:08][350536257496314][4381 ms][DEBUG] SU: done in 296 ms; outsystem 5412 4991 12776696 183008 ep_poll 0 S system_server\n [2025-09-06 17:53:08][350536257496314][4381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 17:53:08][350536257496314][4521 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 17:53:08][350536257496314][4522 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 17:53:08][350536257496314][4522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 17:53:08][350536257496314][4662 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 17:53:08][350536257496314][4662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 17:53:09][350536257496314][4818 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 17:53:11][350536257496314][6833 ms][DEBUG] START check_boot_completed [2025-09-06 17:53:11][350536257496314][6833 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:53:11][350536257496314][6880 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:53:11][350536257496314][6880 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:53:11][350536257496314][6943 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 17:53:11][350536257496314][6943 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 17:53:14][350536257496314][9957 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 17:53:14][350536257496314][9958 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536257496314\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7644\"}'\'' -e'"" [2025-09-06 17:53:18][350536257496314][14425 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d96c0ad-f397-42b1-b52d-b1c401cc319f","id":"QR_6d96c0ad-f397-42b1-b52d-b1c401cc319f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:53:18][350536257496314][14581 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-09-06 17:53:18][350536257496314][14581 ms][DEBUG] END runCmdUntilRes#2 in 4624 ms [2025-09-06 17:53:18][350536257496314][14581 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:53:21][350536257496314][1 ms][INFO] === Request start === [2025-09-06 17:53:21][350536257496314][1 ms][DEBUG] START check_scloud [2025-09-06 17:53:21][350536257496314][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:53:21][350536257496314][232 ms][DEBUG] SU: done in 231 ms; outu0_a118 5911 4991 23742176 124768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:53:21][350536257496314][233 ms][DEBUG] targetPkg: running [2025-09-06 17:53:21][350536257496314][233 ms][DEBUG] END check_scloud in 232 ms [2025-09-06 17:53:21][350536257496314][233 ms][DEBUG] START check_boot_completed [2025-09-06 17:53:21][350536257496314][233 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:53:21][350536257496314][279 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 17:53:21][350536257496314][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:53:21][350536257496314][326 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:53:21][350536257496314][326 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 17:53:21][350536257496314][327 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:53:21][350536257496314][327 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536257496314\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7209\"}'\'' -e'"" [2025-09-06 17:53:21][350536257496314][327 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:53:21][350536257496314][327 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536257496314\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7209\"}'\'' -e'"" [2025-09-06 17:53:26][350536257496314][5294 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4446febd-10f7-4a63-8814-2f38e5708084","id":"QR_4446febd-10f7-4a63-8814-2f38e5708084","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:53:26][350536257496314][5450 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-09-06 17:53:26][350536257496314][5450 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-09-06 17:53:26][350536257496314][5450 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:58:03][350290815524536][1 ms][INFO] === Request start === [2025-09-06 17:58:03][350290815524536][1 ms][DEBUG] START check_scloud [2025-09-06 17:58:03][350290815524536][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:58:04][350290815524536][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 5911 4991 23853672 138924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:58:04][350290815524536][311 ms][DEBUG] targetPkg: running [2025-09-06 17:58:04][350290815524536][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 17:58:04][350290815524536][311 ms][DEBUG] START check_boot_completed [2025-09-06 17:58:04][350290815524536][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:58:04][350290815524536][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 17:58:04][350290815524536][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:58:04][350290815524536][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:58:04][350290815524536][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 17:58:04][350290815524536][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:58:04][350290815524536][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5378\nsuccessfulTxPacketsPerSecond: 0.5109495594180552\nretriedTxPackets: 1349\nretriedTxPacketsPerSecond: 0.17031651980601842\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4805\nsuccessfulRxPacketsPerSecond: 0.40338123111951735\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:58:04][350290815524536][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:58:05][350290815524536][2029 ms][DEBUG] SU: done in 1515 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.163/302.163/302.163/0.000 ms\n [2025-09-06 17:58:05][350290815524536][2029 ms][DEBUG] check_internet: online [2025-09-06 17:58:05][350290815524536][2029 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:58:05][350290815524536][2029 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290815524536\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6247\"}'\'' -e'"" [2025-09-06 17:58:05][350290815524536][2030 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:58:05][350290815524536][2030 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290815524536\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6247\"}'\'' -e'"" [2025-09-06 17:58:09][350290815524536][6012 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5d753af-25c1-41b8-a4cd-a4ceddc0e9e2","id":"QR_a5d753af-25c1-41b8-a4cd-a4ceddc0e9e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:58:10][350290815524536][6168 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-09-06 17:58:10][350290815524536][6169 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-09-06 17:58:10][350290815524536][6169 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:58:12][350290815524536][0 ms][INFO] === Request start === [2025-09-06 17:58:12][350290815524536][1 ms][DEBUG] START check_scloud [2025-09-06 17:58:12][350290815524536][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:58:12][350290815524536][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 5911 4991 24018672 150744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:58:12][350290815524536][312 ms][DEBUG] targetPkg: running [2025-09-06 17:58:12][350290815524536][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 17:58:12][350290815524536][312 ms][DEBUG] START check_boot_completed [2025-09-06 17:58:12][350290815524536][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:58:12][350290815524536][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:58:12][350290815524536][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:58:12][350290815524536][408 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 17:58:12][350290815524536][408 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 17:58:12][350290815524536][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 17:58:13][350290815524536][562 ms][DEBUG] SU: done in 154 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5378\nsuccessfulTxPacketsPerSecond: 0.5109495594180552\nretriedTxPackets: 1349\nretriedTxPacketsPerSecond: 0.17031651980601842\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4805\nsuccessfulRxPacketsPerSecond: 0.40338123111951735\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 17:58:13][350290815524536][563 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 17:58:13][350290815524536][874 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.024/227.024/227.024/0.000 ms\n [2025-09-06 17:58:13][350290815524536][874 ms][DEBUG] check_internet: online [2025-09-06 17:58:13][350290815524536][874 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:58:13][350290815524536][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290815524536\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8558\"}'\'' -e'"" [2025-09-06 17:58:13][350290815524536][875 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:58:13][350290815524536][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290815524536\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8558\"}'\'' -e'"" [2025-09-06 17:58:18][350290815524536][5998 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ab193fb-e736-4746-a772-50584f3ba791","id":"QR_2ab193fb-e736-4746-a772-50584f3ba791","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:58:18][350290815524536][6154 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-09-06 17:58:18][350290815524536][6155 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-06 17:58:18][350290815524536][6155 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:59:03][353548753658807][0 ms][INFO] === Request start === [2025-09-06 17:59:03][353548753658807][1 ms][DEBUG] START check_scloud [2025-09-06 17:59:03][353548753658807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:59:03][353548753658807][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 5911 4991 24140272 161268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:59:03][353548753658807][322 ms][DEBUG] targetPkg: running [2025-09-06 17:59:03][353548753658807][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-06 17:59:03][353548753658807][322 ms][DEBUG] START check_boot_completed [2025-09-06 17:59:03][353548753658807][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:59:03][353548753658807][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:59:03][353548753658807][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:59:03][353548753658807][431 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 17:59:03][353548753658807][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 17:59:03][353548753658807][431 ms][DEBUG] rawBody.length=1150 [2025-09-06 17:59:03][353548753658807][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548753658807\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9191\"}'\'' -e'"" [2025-09-06 17:59:03][353548753658807][431 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:59:03][353548753658807][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548753658807\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9191\"}'\'' -e'"" [2025-09-06 17:59:07][353548753658807][3977 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b342d36-8bab-4dd1-b554-b7c44c50cd3d","id":"QR_4b342d36-8bab-4dd1-b554-b7c44c50cd3d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:59:07][353548753658807][4133 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-09-06 17:59:07][353548753658807][4133 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-09-06 17:59:07][353548753658807][4133 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 17:59:09][353548753658807][0 ms][INFO] === Request start === [2025-09-06 17:59:09][353548753658807][1 ms][DEBUG] START check_scloud [2025-09-06 17:59:09][353548753658807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 17:59:10][353548753658807][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 5911 4991 24270456 172016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 17:59:10][353548753658807][253 ms][DEBUG] targetPkg: running [2025-09-06 17:59:10][353548753658807][253 ms][DEBUG] END check_scloud in 252 ms [2025-09-06 17:59:10][353548753658807][253 ms][DEBUG] START check_boot_completed [2025-09-06 17:59:10][353548753658807][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 17:59:10][353548753658807][300 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 17:59:10][353548753658807][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 17:59:10][353548753658807][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 17:59:10][353548753658807][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 17:59:10][353548753658807][347 ms][DEBUG] rawBody.length=1160 [2025-09-06 17:59:10][353548753658807][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548753658807\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6197\"}'\'' -e'"" [2025-09-06 17:59:10][353548753658807][347 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 17:59:10][353548753658807][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548753658807\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6197\"}'\'' -e'"" [2025-09-06 17:59:15][353548753658807][5283 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16b5f841-1425-4810-a2c2-b838fdb398e2","id":"QR_16b5f841-1425-4810-a2c2-b838fdb398e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 17:59:15][353548753658807][5439 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-06 17:59:15][353548753658807][5439 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-06 17:59:15][353548753658807][5439 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:00:05][352563110289379][1 ms][INFO] === Request start === [2025-09-06 18:00:05][352563110289379][1 ms][DEBUG] START check_scloud [2025-09-06 18:00:05][352563110289379][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:00:05][352563110289379][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 5911 4991 24375992 183908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:00:05][352563110289379][304 ms][DEBUG] targetPkg: running [2025-09-06 18:00:05][352563110289379][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 18:00:05][352563110289379][304 ms][DEBUG] START check_boot_completed [2025-09-06 18:00:05][352563110289379][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:00:05][352563110289379][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:00:05][352563110289379][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:00:05][352563110289379][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:00:05][352563110289379][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 18:00:05][352563110289379][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:00:05][352563110289379][492 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5586\nsuccessfulTxPacketsPerSecond: 0.6710824753909539\nretriedTxPackets: 1394\nretriedTxPacketsPerSecond: 0.14518611246438906\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5000\nsuccessfulRxPacketsPerSecond: 0.6291398206790193\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:00:05][352563110289379][492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:00:06][352563110289379][944 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=337 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 337.965/337.965/337.965/0.000 ms\n [2025-09-06 18:00:06][352563110289379][944 ms][DEBUG] check_internet: online [2025-09-06 18:00:06][352563110289379][945 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:00:06][352563110289379][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352563110289379\",\"model\":\"SM-G986U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8908\"}'\'' -e'"" [2025-09-06 18:00:06][352563110289379][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:00:06][352563110289379][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352563110289379\",\"model\":\"SM-G986U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8908\"}'\'' -e'"" [2025-09-06 18:00:12][352563110289379][7208 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0dda04b2-c29f-4807-ac9d-63fc639165f1","id":"QR_0dda04b2-c29f-4807-ac9d-63fc639165f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:00:12][352563110289379][7365 ms][DEBUG] proc_open done in 6419 ms; code=255; res.len=3343 [2025-09-06 18:00:12][352563110289379][7365 ms][DEBUG] END runCmdUntilRes#1 in 6420 ms [2025-09-06 18:00:12][352563110289379][7365 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:00:16][352563110289379][0 ms][INFO] === Request start === [2025-09-06 18:00:16][352563110289379][1 ms][DEBUG] START check_scloud [2025-09-06 18:00:16][352563110289379][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:00:16][352563110289379][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 5911 4991 24549312 186864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:00:16][352563110289379][257 ms][DEBUG] targetPkg: running [2025-09-06 18:00:16][352563110289379][257 ms][DEBUG] END check_scloud in 257 ms [2025-09-06 18:00:16][352563110289379][257 ms][DEBUG] START check_boot_completed [2025-09-06 18:00:16][352563110289379][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:00:16][352563110289379][304 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:00:16][352563110289379][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:00:16][352563110289379][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:00:16][352563110289379][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:00:16][352563110289379][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:00:16][352563110289379][460 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5586\nsuccessfulTxPacketsPerSecond: 0.6710824753909539\nretriedTxPackets: 1394\nretriedTxPacketsPerSecond: 0.14518611246438906\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5000\nsuccessfulRxPacketsPerSecond: 0.6291398206790193\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:00:16][352563110289379][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:00:17][352563110289379][851 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.360/269.360/269.360/0.000 ms\n [2025-09-06 18:00:17][352563110289379][851 ms][DEBUG] check_internet: online [2025-09-06 18:00:17][352563110289379][851 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:00:17][352563110289379][851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352563110289379\",\"model\":\"SM-G986U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3846\"}'\'' -e'"" [2025-09-06 18:00:17][352563110289379][851 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:00:17][352563110289379][851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352563110289379\",\"model\":\"SM-G986U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3846\"}'\'' -e'"" [2025-09-06 18:00:21][352563110289379][4787 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a594ef2-5d1d-4e1e-a894-fb21eed4296b","id":"QR_1a594ef2-5d1d-4e1e-a894-fb21eed4296b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:00:21][352563110289379][4943 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-09-06 18:00:21][352563110289379][4943 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-06 18:00:21][352563110289379][4943 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:04:04][350257390738500][1 ms][INFO] === Request start === [2025-09-06 18:04:04][350257390738500][1 ms][DEBUG] START check_scloud [2025-09-06 18:04:04][350257390738500][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:04:04][350257390738500][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 5911 4991 24685696 192992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:04:04][350257390738500][303 ms][DEBUG] targetPkg: running [2025-09-06 18:04:04][350257390738500][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 18:04:04][350257390738500][303 ms][DEBUG] START check_boot_completed [2025-09-06 18:04:04][350257390738500][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:04:04][350257390738500][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:04:04][350257390738500][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:04:04][350257390738500][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:04:04][350257390738500][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 18:04:04][350257390738500][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:04:05][350257390738500][491 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5983\nsuccessfulTxPacketsPerSecond: 1.3179341962427256\nretriedTxPackets: 1437\nretriedTxPacketsPerSecond: 0.14274854014719698\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5354\nsuccessfulRxPacketsPerSecond: 1.1751856560955287\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:04:05][350257390738500][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:04:06][350257390738500][1882 ms][DEBUG] SU: done in 1391 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.782/294.782/294.782/0.000 ms\n [2025-09-06 18:04:06][350257390738500][1882 ms][DEBUG] check_internet: online [2025-09-06 18:04:06][350257390738500][1883 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:04:06][350257390738500][1883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350257390738500\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4389\"}'\'' -e'"" [2025-09-06 18:04:06][350257390738500][1883 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:04:06][350257390738500][1883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350257390738500\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4389\"}'\'' -e'"" [2025-09-06 18:04:11][350257390738500][7130 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14795d4b-9dd1-40b7-afc0-8473e8bacb60","id":"QR_14795d4b-9dd1-40b7-afc0-8473e8bacb60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:04:11][350257390738500][7286 ms][DEBUG] proc_open done in 5403 ms; code=255; res.len=3343 [2025-09-06 18:04:11][350257390738500][7286 ms][DEBUG] END runCmdUntilRes#1 in 5403 ms [2025-09-06 18:04:11][350257390738500][7286 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:04:15][350257390738500][0 ms][INFO] === Request start === [2025-09-06 18:04:15][350257390738500][1 ms][DEBUG] START check_scloud [2025-09-06 18:04:15][350257390738500][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:04:15][350257390738500][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 5911 4991 24854984 203880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:04:15][350257390738500][311 ms][DEBUG] targetPkg: running [2025-09-06 18:04:15][350257390738500][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 18:04:15][350257390738500][311 ms][DEBUG] START check_boot_completed [2025-09-06 18:04:15][350257390738500][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:04:15][350257390738500][358 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:04:15][350257390738500][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:04:15][350257390738500][420 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 18:04:15][350257390738500][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 18:04:15][350257390738500][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:04:15][350257390738500][530 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5983\nsuccessfulTxPacketsPerSecond: 1.3179341962427256\nretriedTxPackets: 1437\nretriedTxPacketsPerSecond: 0.14274854014719698\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5354\nsuccessfulRxPacketsPerSecond: 1.1751856560955287\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:04:15][350257390738500][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:04:16][350257390738500][889 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.734/226.734/226.734/0.000 ms\n [2025-09-06 18:04:16][350257390738500][889 ms][DEBUG] check_internet: online [2025-09-06 18:04:16][350257390738500][890 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:04:16][350257390738500][890 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350257390738500\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4324\"}'\'' -e'"" [2025-09-06 18:04:16][350257390738500][890 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:04:16][350257390738500][890 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350257390738500\",\"model\":\"SM-A325M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4324\"}'\'' -e'"" [2025-09-06 18:04:20][350257390738500][4997 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bdec9929-5741-4bf0-ab36-d89ce3e2d394","id":"QR_bdec9929-5741-4bf0-ab36-d89ce3e2d394","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:04:20][350257390738500][5153 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-09-06 18:04:20][350257390738500][5153 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-09-06 18:04:20][350257390738500][5153 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:04:23][354691313029983][0 ms][INFO] === Request start === [2025-09-06 18:04:23][354691313029983][1 ms][DEBUG] START check_scloud [2025-09-06 18:04:23][354691313029983][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:04:23][354691313029983][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 5911 4991 24977108 202568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:04:23][354691313029983][315 ms][DEBUG] targetPkg: running [2025-09-06 18:04:23][354691313029983][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 18:04:23][354691313029983][316 ms][DEBUG] START check_boot_completed [2025-09-06 18:04:23][354691313029983][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:04:23][354691313029983][362 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:04:23][354691313029983][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:04:24][354691313029983][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 18:04:24][354691313029983][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 18:04:24][354691313029983][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:04:24][354691313029983][534 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5983\nsuccessfulTxPacketsPerSecond: 1.3179341962427256\nretriedTxPackets: 1437\nretriedTxPacketsPerSecond: 0.14274854014719698\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5354\nsuccessfulRxPacketsPerSecond: 1.1751856560955287\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:04:24][354691313029983][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:04:24][354691313029983][924 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=285 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 285.262/285.262/285.262/0.000 ms\n [2025-09-06 18:04:24][354691313029983][924 ms][DEBUG] check_internet: online [2025-09-06 18:04:24][354691313029983][925 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:04:24][354691313029983][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354691313029983\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8849\"}'\'' -e'"" [2025-09-06 18:04:24][354691313029983][925 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:04:24][354691313029983][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354691313029983\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8849\"}'\'' -e'"" [2025-09-06 18:04:31][354691313029983][7407 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fb13c54-900c-4331-ae24-62ef38c09ecb","id":"QR_5fb13c54-900c-4331-ae24-62ef38c09ecb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:04:31][354691313029983][7563 ms][DEBUG] proc_open done in 6639 ms; code=255; res.len=3343 [2025-09-06 18:04:31][354691313029983][7564 ms][DEBUG] END runCmdUntilRes#1 in 6639 ms [2025-09-06 18:04:31][354691313029983][7564 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:04:34][354691313029983][0 ms][INFO] === Request start === [2025-09-06 18:04:34][354691313029983][1 ms][DEBUG] START check_scloud [2025-09-06 18:04:34][354691313029983][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:04:35][354691313029983][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 5911 4991 25138104 213604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:04:35][354691313029983][303 ms][DEBUG] targetPkg: running [2025-09-06 18:04:35][354691313029983][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 18:04:35][354691313029983][303 ms][DEBUG] START check_boot_completed [2025-09-06 18:04:35][354691313029983][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:04:35][354691313029983][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:04:35][354691313029983][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:04:35][354691313029983][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:04:35][354691313029983][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:04:35][354691313029983][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:04:35][354691313029983][491 ms][DEBUG] SU: done in 95 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5983\nsuccessfulTxPacketsPerSecond: 1.3179341962427256\nretriedTxPackets: 1437\nretriedTxPacketsPerSecond: 0.14274854014719698\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5354\nsuccessfulRxPacketsPerSecond: 1.1751856560955287\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:04:35][354691313029983][491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:04:35][354691313029983][865 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=284 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 284.335/284.335/284.335/0.000 ms\n [2025-09-06 18:04:35][354691313029983][865 ms][DEBUG] check_internet: online [2025-09-06 18:04:35][354691313029983][865 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:04:35][354691313029983][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354691313029983\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3910\"}'\'' -e'"" [2025-09-06 18:04:35][354691313029983][866 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:04:35][354691313029983][866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354691313029983\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3910\"}'\'' -e'"" [2025-09-06 18:04:40][354691313029983][5271 ms][DEBUG] proc_open done in 4405 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 18:04:40][354691313029983][5271 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-09-06 18:04:40][354691313029983][5271 ms][WARN] Detected error: Process with pid 5911 either refused to load frida-agent, or terminated during injectionProcess with pid 5911 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 18:04:40][354691313029983][5271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 18:04:40][354691313029983][5567 ms][DEBUG] SU: done in 296 ms; outsystem 5412 4991 12871260 202508 ep_poll 0 S system_server\n [2025-09-06 18:04:40][354691313029983][5567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 18:04:40][354691313029983][5709 ms][DEBUG] SU: done in 142 ms; out [2025-09-06 18:04:40][354691313029983][5709 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 18:04:40][354691313029983][5709 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 18:04:40][354691313029983][5848 ms][DEBUG] SU: done in 139 ms; out [2025-09-06 18:04:40][354691313029983][5848 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 18:04:40][354691313029983][6051 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 18:04:42][354691313029983][8066 ms][DEBUG] START check_boot_completed [2025-09-06 18:04:42][354691313029983][8067 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:04:42][354691313029983][8113 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:04:42][354691313029983][8113 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:04:42][354691313029983][8160 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:04:42][354691313029983][8160 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 18:04:45][354691313029983][11175 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 18:04:45][354691313029983][11175 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354691313029983\",\"model\":\"SM-A047M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3910\"}'\'' -e'"" [2025-09-06 18:04:49][354691313029983][14627 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b20a5aa-e943-4f41-8fb1-d1453082d50f","id":"QR_6b20a5aa-e943-4f41-8fb1-d1453082d50f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:04:49][354691313029983][14784 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-06 18:04:49][354691313029983][14784 ms][DEBUG] END runCmdUntilRes#2 in 3609 ms [2025-09-06 18:04:49][354691313029983][14784 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:05:04][350371093480201][0 ms][INFO] === Request start === [2025-09-06 18:05:04][350371093480201][1 ms][DEBUG] START check_scloud [2025-09-06 18:05:04][350371093480201][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:05:05][350371093480201][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 9353 4991 23818020 127320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:05:05][350371093480201][241 ms][DEBUG] targetPkg: running [2025-09-06 18:05:05][350371093480201][241 ms][DEBUG] END check_scloud in 240 ms [2025-09-06 18:05:05][350371093480201][241 ms][DEBUG] START check_boot_completed [2025-09-06 18:05:05][350371093480201][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:05:05][350371093480201][272 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:05:05][350371093480201][272 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:05:05][350371093480201][319 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:05:05][350371093480201][319 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 18:05:05][350371093480201][319 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:05:05][350371093480201][319 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350371093480201\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6235\"}'\'' -e'"" [2025-09-06 18:05:05][350371093480201][319 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:05:05][350371093480201][319 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350371093480201\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6235\"}'\'' -e'"" [2025-09-06 18:05:10][350371093480201][5130 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9183a4b-37cd-405e-a7c3-d3bc2b5b4135","id":"QR_b9183a4b-37cd-405e-a7c3-d3bc2b5b4135","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:05:10][350371093480201][5287 ms][DEBUG] proc_open done in 4968 ms; code=255; res.len=3343 [2025-09-06 18:05:10][350371093480201][5287 ms][DEBUG] END runCmdUntilRes#1 in 4968 ms [2025-09-06 18:05:10][350371093480201][5287 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:05:13][350371093480201][0 ms][INFO] === Request start === [2025-09-06 18:05:13][350371093480201][0 ms][DEBUG] START check_scloud [2025-09-06 18:05:13][350371093480201][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:05:14][350371093480201][284 ms][DEBUG] SU: done in 284 ms; outu0_a118 9353 4991 23880252 138476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:05:14][350371093480201][284 ms][DEBUG] targetPkg: running [2025-09-06 18:05:14][350371093480201][284 ms][DEBUG] END check_scloud in 284 ms [2025-09-06 18:05:14][350371093480201][284 ms][DEBUG] START check_boot_completed [2025-09-06 18:05:14][350371093480201][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:05:14][350371093480201][315 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:05:14][350371093480201][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:05:14][350371093480201][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:05:14][350371093480201][362 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 18:05:14][350371093480201][362 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:05:14][350371093480201][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350371093480201\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3627\"}'\'' -e'"" [2025-09-06 18:05:14][350371093480201][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:05:14][350371093480201][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350371093480201\",\"model\":\"SM-A528B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3627\"}'\'' -e'"" [2025-09-06 18:05:17][350371093480201][3939 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69bdcc15-a9d4-445e-a05c-bb4ce2557eae","id":"QR_69bdcc15-a9d4-445e-a05c-bb4ce2557eae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:05:17][350371093480201][4095 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-09-06 18:05:17][350371093480201][4095 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-09-06 18:05:17][350371093480201][4095 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:07:03][357674437909360][1 ms][INFO] === Request start === [2025-09-06 18:07:03][357674437909360][1 ms][DEBUG] START check_scloud [2025-09-06 18:07:03][357674437909360][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:07:03][357674437909360][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 9353 4991 24011440 149888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:07:03][357674437909360][322 ms][DEBUG] targetPkg: running [2025-09-06 18:07:03][357674437909360][322 ms][DEBUG] END check_scloud in 321 ms [2025-09-06 18:07:03][357674437909360][322 ms][DEBUG] START check_boot_completed [2025-09-06 18:07:03][357674437909360][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:07:03][357674437909360][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:07:03][357674437909360][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:07:03][357674437909360][447 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 18:07:03][357674437909360][447 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 18:07:03][357674437909360][447 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:07:03][357674437909360][447 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437909360\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9196\"}'\'' -e'"" [2025-09-06 18:07:03][357674437909360][447 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:07:03][357674437909360][448 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437909360\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9196\"}'\'' -e'"" [2025-09-06 18:07:08][357674437909360][5086 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce78f696-f8d9-4525-982e-2bbb09695642","id":"QR_ce78f696-f8d9-4525-982e-2bbb09695642","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:07:08][357674437909360][5242 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 18:07:08][357674437909360][5242 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-06 18:07:08][357674437909360][5242 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:07:10][357674437909360][0 ms][INFO] === Request start === [2025-09-06 18:07:10][357674437909360][1 ms][DEBUG] START check_scloud [2025-09-06 18:07:10][357674437909360][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:07:11][357674437909360][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 9353 4991 24180408 160908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:07:11][357674437909360][300 ms][DEBUG] targetPkg: running [2025-09-06 18:07:11][357674437909360][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 18:07:11][357674437909360][300 ms][DEBUG] START check_boot_completed [2025-09-06 18:07:11][357674437909360][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:07:11][357674437909360][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:07:11][357674437909360][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:07:11][357674437909360][380 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 18:07:11][357674437909360][380 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-06 18:07:11][357674437909360][380 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:07:11][357674437909360][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437909360\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9863\"}'\'' -e'"" [2025-09-06 18:07:11][357674437909360][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:07:11][357674437909360][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437909360\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9863\"}'\'' -e'"" [2025-09-06 18:07:16][357674437909360][5814 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbb337b5-a54c-4bae-98ce-51e32fd32ea3","id":"QR_cbb337b5-a54c-4bae-98ce-51e32fd32ea3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:07:16][357674437909360][5970 ms][DEBUG] proc_open done in 5590 ms; code=255; res.len=3343 [2025-09-06 18:07:16][357674437909360][5970 ms][DEBUG] END runCmdUntilRes#1 in 5590 ms [2025-09-06 18:07:16][357674437909360][5970 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:09:04][358543582337330][1 ms][INFO] === Request start === [2025-09-06 18:09:04][358543582337330][1 ms][DEBUG] START check_scloud [2025-09-06 18:09:04][358543582337330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:09:05][358543582337330][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 9353 4991 24279928 171700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:09:05][358543582337330][312 ms][DEBUG] targetPkg: running [2025-09-06 18:09:05][358543582337330][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 18:09:05][358543582337330][312 ms][DEBUG] START check_boot_completed [2025-09-06 18:09:05][358543582337330][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:09:05][358543582337330][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:09:05][358543582337330][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:09:05][358543582337330][391 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 18:09:05][358543582337330][391 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 18:09:05][358543582337330][391 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:09:05][358543582337330][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543582337330\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4478\"}'\'' -e'"" [2025-09-06 18:09:05][358543582337330][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:09:05][358543582337330][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543582337330\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4478\"}'\'' -e'"" [2025-09-06 18:09:11][358543582337330][6123 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d50d194-c820-4a1d-a426-eec38da584d4","id":"QR_1d50d194-c820-4a1d-a426-eec38da584d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:09:11][358543582337330][6279 ms][DEBUG] proc_open done in 5888 ms; code=255; res.len=3343 [2025-09-06 18:09:11][358543582337330][6279 ms][DEBUG] END runCmdUntilRes#1 in 5888 ms [2025-09-06 18:09:11][358543582337330][6279 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:09:14][358543582337330][1 ms][INFO] === Request start === [2025-09-06 18:09:14][358543582337330][1 ms][DEBUG] START check_scloud [2025-09-06 18:09:14][358543582337330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:09:15][358543582337330][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 9353 4991 24445056 183768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:09:15][358543582337330][314 ms][DEBUG] targetPkg: running [2025-09-06 18:09:15][358543582337330][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 18:09:15][358543582337330][314 ms][DEBUG] START check_boot_completed [2025-09-06 18:09:15][358543582337330][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:09:15][358543582337330][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:09:15][358543582337330][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:09:15][358543582337330][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:09:15][358543582337330][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:09:15][358543582337330][407 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:09:15][358543582337330][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543582337330\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7307\"}'\'' -e'"" [2025-09-06 18:09:15][358543582337330][407 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:09:15][358543582337330][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543582337330\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7307\"}'\'' -e'"" [2025-09-06 18:09:19][358543582337330][4312 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f47768c5-7628-4998-8cd5-3a195397ce32","id":"QR_f47768c5-7628-4998-8cd5-3a195397ce32","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:09:19][358543582337330][4468 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-06 18:09:19][358543582337330][4469 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-06 18:09:19][358543582337330][4469 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:12:03][354230211303594][1 ms][INFO] === Request start === [2025-09-06 18:12:03][354230211303594][1 ms][DEBUG] START check_scloud [2025-09-06 18:12:03][354230211303594][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:12:03][354230211303594][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 9353 4991 24591680 194924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:12:03][354230211303594][254 ms][DEBUG] targetPkg: running [2025-09-06 18:12:03][354230211303594][255 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 18:12:03][354230211303594][255 ms][DEBUG] START check_boot_completed [2025-09-06 18:12:03][354230211303594][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:12:03][354230211303594][301 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:12:03][354230211303594][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:12:03][354230211303594][348 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:12:03][354230211303594][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:12:03][354230211303594][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:12:04][354230211303594][457 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6151\nsuccessfulTxPacketsPerSecond: 0.8708633988554366\nretriedTxPackets: 1491\nretriedTxPacketsPerSecond: 0.2799203782035332\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5495\nsuccessfulRxPacketsPerSecond: 0.7309032097536701\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:12:04][354230211303594][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:12:05][354230211303594][2160 ms][DEBUG] SU: done in 1703 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=506 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 506.613/506.613/506.613/0.000 ms\n [2025-09-06 18:12:05][354230211303594][2160 ms][DEBUG] check_internet: online [2025-09-06 18:12:05][354230211303594][2160 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:12:05][354230211303594][2160 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230211303594\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4915\"}'\'' -e'"" [2025-09-06 18:12:05][354230211303594][2161 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:12:05][354230211303594][2161 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230211303594\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4915\"}'\'' -e'"" [2025-09-06 18:12:09][354230211303594][6253 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0bd2585-9354-42ba-9548-6f7f9271aceb","id":"QR_f0bd2585-9354-42ba-9548-6f7f9271aceb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:12:10][354230211303594][6409 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-09-06 18:12:10][354230211303594][6409 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-09-06 18:12:10][354230211303594][6409 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:12:12][354230211303594][0 ms][INFO] === Request start === [2025-09-06 18:12:12][354230211303594][1 ms][DEBUG] START check_scloud [2025-09-06 18:12:12][354230211303594][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:12:12][354230211303594][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 9353 4991 24740296 206928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:12:12][354230211303594][270 ms][DEBUG] targetPkg: running [2025-09-06 18:12:12][354230211303594][270 ms][DEBUG] END check_scloud in 269 ms [2025-09-06 18:12:12][354230211303594][270 ms][DEBUG] START check_boot_completed [2025-09-06 18:12:12][354230211303594][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:12:12][354230211303594][317 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:12:12][354230211303594][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:12:12][354230211303594][364 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:12:12][354230211303594][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:12:12][354230211303594][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:12:12][354230211303594][473 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6151\nsuccessfulTxPacketsPerSecond: 0.8708633988554366\nretriedTxPackets: 1491\nretriedTxPacketsPerSecond: 0.2799203782035332\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5495\nsuccessfulRxPacketsPerSecond: 0.7309032097536701\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:12:12][354230211303594][473 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:12:13][354230211303594][895 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.084/303.084/303.084/0.000 ms\n [2025-09-06 18:12:13][354230211303594][895 ms][DEBUG] check_internet: online [2025-09-06 18:12:13][354230211303594][895 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:12:13][354230211303594][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230211303594\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5590\"}'\'' -e'"" [2025-09-06 18:12:13][354230211303594][896 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:12:13][354230211303594][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354230211303594\",\"model\":\"SM-A235F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5590\"}'\'' -e'"" [2025-09-06 18:12:18][354230211303594][5940 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d6c6592-7b4e-4825-8a41-71bd21ef0aa9","id":"QR_2d6c6592-7b4e-4825-8a41-71bd21ef0aa9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:12:18][354230211303594][6097 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-06 18:12:18][354230211303594][6097 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-06 18:12:18][354230211303594][6097 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:15:04][357435840264953][1 ms][INFO] === Request start === [2025-09-06 18:15:04][357435840264953][1 ms][DEBUG] START check_scloud [2025-09-06 18:15:04][357435840264953][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:15:04][357435840264953][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 9353 4991 24833672 217816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:15:04][357435840264953][302 ms][DEBUG] targetPkg: running [2025-09-06 18:15:04][357435840264953][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 18:15:04][357435840264953][302 ms][DEBUG] START check_boot_completed [2025-09-06 18:15:04][357435840264953][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:15:04][357435840264953][333 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:15:04][357435840264953][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:15:04][357435840264953][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:15:04][357435840264953][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 18:15:04][357435840264953][380 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:15:04][357435840264953][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840264953\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3124\"}'\'' -e'"" [2025-09-06 18:15:04][357435840264953][380 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:15:04][357435840264953][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840264953\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3124\"}'\'' -e'"" [2025-09-06 18:15:09][357435840264953][4942 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a10e6fa-9a5d-4ced-accd-e2d2b3382a8b","id":"QR_2a10e6fa-9a5d-4ced-accd-e2d2b3382a8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:15:09][357435840264953][5098 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-09-06 18:15:09][357435840264953][5098 ms][DEBUG] END runCmdUntilRes#1 in 4718 ms [2025-09-06 18:15:09][357435840264953][5098 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:15:11][357435840264953][1 ms][INFO] === Request start === [2025-09-06 18:15:11][357435840264953][1 ms][DEBUG] START check_scloud [2025-09-06 18:15:11][357435840264953][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:15:12][357435840264953][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 9353 4991 24997832 229656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:15:12][357435840264953][311 ms][DEBUG] targetPkg: running [2025-09-06 18:15:12][357435840264953][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 18:15:12][357435840264953][311 ms][DEBUG] START check_boot_completed [2025-09-06 18:15:12][357435840264953][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:15:12][357435840264953][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:15:12][357435840264953][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:15:12][357435840264953][420 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 18:15:12][357435840264953][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 18:15:12][357435840264953][420 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:15:12][357435840264953][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840264953\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3012\"}'\'' -e'"" [2025-09-06 18:15:12][357435840264953][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:15:12][357435840264953][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840264953\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3012\"}'\'' -e'"" [2025-09-06 18:15:17][357435840264953][5622 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2eabdf6d-2389-4849-b644-da6a29a339f6","id":"QR_2eabdf6d-2389-4849-b644-da6a29a339f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:15:17][357435840264953][5778 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-09-06 18:15:17][357435840264953][5778 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-09-06 18:15:17][357435840264953][5778 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:18:03][356414816417953][1 ms][INFO] === Request start === [2025-09-06 18:18:03][356414816417953][1 ms][DEBUG] START check_scloud [2025-09-06 18:18:03][356414816417953][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:18:04][356414816417953][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 9353 4991 25107596 240904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:18:04][356414816417953][310 ms][DEBUG] targetPkg: running [2025-09-06 18:18:04][356414816417953][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 18:18:04][356414816417953][310 ms][DEBUG] START check_boot_completed [2025-09-06 18:18:04][356414816417953][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:18:04][356414816417953][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:18:04][356414816417953][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:18:04][356414816417953][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:18:04][356414816417953][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 18:18:04][356414816417953][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:18:04][356414816417953][528 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6369\nsuccessfulTxPacketsPerSecond: 0.2455823091434759\nretriedTxPackets: 1568\nretriedTxPacketsPerSecond: 0.09674454602621778\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5674\nsuccessfulRxPacketsPerSecond: 0.1897681479745041\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:18:04][356414816417953][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:18:05][356414816417953][1872 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.110/304.110/304.110/0.000 ms\n [2025-09-06 18:18:05][356414816417953][1872 ms][DEBUG] check_internet: online [2025-09-06 18:18:05][356414816417953][1872 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:18:05][356414816417953][1872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816417953\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5284\"}'\'' -e'"" [2025-09-06 18:18:05][356414816417953][1872 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:18:05][356414816417953][1872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816417953\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5284\"}'\'' -e'"" [2025-09-06 18:18:09][356414816417953][5730 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 18:18:09][356414816417953][5730 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-06 18:18:09][356414816417953][5730 ms][WARN] Detected error: Process with pid 9353 either refused to load frida-agent, or terminated during injectionProcess with pid 9353 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 18:18:09][356414816417953][5730 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 18:18:09][356414816417953][6043 ms][DEBUG] SU: done in 313 ms; outsystem 5412 4991 12780348 188304 ep_poll 0 S system_server\n [2025-09-06 18:18:09][356414816417953][6043 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 18:18:09][356414816417953][6183 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 18:18:09][356414816417953][6183 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 18:18:09][356414816417953][6183 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 18:18:10][356414816417953][6324 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 18:18:10][356414816417953][6324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 18:18:10][356414816417953][6480 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 18:18:12][356414816417953][8495 ms][DEBUG] START check_boot_completed [2025-09-06 18:18:12][356414816417953][8495 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:18:12][356414816417953][8542 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:18:12][356414816417953][8542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:18:12][356414816417953][8589 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:18:12][356414816417953][8589 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 18:18:15][356414816417953][11604 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 18:18:15][356414816417953][11604 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816417953\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5284\"}'\'' -e'"" [2025-09-06 18:18:19][356414816417953][15400 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b48141d-dfa6-4f42-ac48-5fd603807007","id":"QR_3b48141d-dfa6-4f42-ac48-5fd603807007","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:18:19][356414816417953][15556 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-06 18:18:19][356414816417953][15556 ms][DEBUG] END runCmdUntilRes#2 in 3952 ms [2025-09-06 18:18:19][356414816417953][15556 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:18:21][356414816417953][0 ms][INFO] === Request start === [2025-09-06 18:18:21][356414816417953][1 ms][DEBUG] START check_scloud [2025-09-06 18:18:21][356414816417953][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:18:21][356414816417953][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 10788 4991 23756448 124296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:18:21][356414816417953][244 ms][DEBUG] targetPkg: running [2025-09-06 18:18:21][356414816417953][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-06 18:18:21][356414816417953][244 ms][DEBUG] START check_boot_completed [2025-09-06 18:18:21][356414816417953][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:18:22][356414816417953][290 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:18:22][356414816417953][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:18:22][356414816417953][338 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:18:22][356414816417953][338 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 18:18:22][356414816417953][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:18:22][356414816417953][462 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6369\nsuccessfulTxPacketsPerSecond: 0.2455823091434759\nretriedTxPackets: 1568\nretriedTxPacketsPerSecond: 0.09674454602621778\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5674\nsuccessfulRxPacketsPerSecond: 0.1897681479745041\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:18:22][356414816417953][463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:18:22][356414816417953][806 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.280/226.280/226.280/0.000 ms\n [2025-09-06 18:18:22][356414816417953][806 ms][DEBUG] check_internet: online [2025-09-06 18:18:22][356414816417953][806 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:18:22][356414816417953][806 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816417953\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3284\"}'\'' -e'"" [2025-09-06 18:18:22][356414816417953][806 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:18:22][356414816417953][806 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816417953\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3284\"}'\'' -e'"" [2025-09-06 18:18:28][356414816417953][7023 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3bde0e80-5e49-4fa3-aae9-79535691f9c5","id":"QR_3bde0e80-5e49-4fa3-aae9-79535691f9c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:18:28][356414816417953][7179 ms][DEBUG] proc_open done in 6373 ms; code=255; res.len=3343 [2025-09-06 18:18:28][356414816417953][7179 ms][DEBUG] END runCmdUntilRes#1 in 6373 ms [2025-09-06 18:18:28][356414816417953][7179 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:20:04][354909110342312][1 ms][INFO] === Request start === [2025-09-06 18:20:04][354909110342312][1 ms][DEBUG] START check_scloud [2025-09-06 18:20:04][354909110342312][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:20:04][354909110342312][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 10788 4991 23814552 137188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:20:04][354909110342312][295 ms][DEBUG] targetPkg: running [2025-09-06 18:20:04][354909110342312][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 18:20:04][354909110342312][295 ms][DEBUG] START check_boot_completed [2025-09-06 18:20:04][354909110342312][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:20:04][354909110342312][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:20:04][354909110342312][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:20:04][354909110342312][389 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 18:20:04][354909110342312][389 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 18:20:04][354909110342312][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:20:05][354909110342312][529 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6369\nsuccessfulTxPacketsPerSecond: 0.2455823091434759\nretriedTxPackets: 1568\nretriedTxPacketsPerSecond: 0.09674454602621778\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5674\nsuccessfulRxPacketsPerSecond: 0.1897681479745041\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:20:05][354909110342312][529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:20:05][354909110342312][982 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=337 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 337.095/337.095/337.095/0.000 ms\n [2025-09-06 18:20:05][354909110342312][982 ms][DEBUG] check_internet: online [2025-09-06 18:20:05][354909110342312][982 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:20:05][354909110342312][982 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354909110342312\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2531\"}'\'' -e'"" [2025-09-06 18:20:05][354909110342312][982 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:20:05][354909110342312][982 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354909110342312\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2531\"}'\'' -e'"" [2025-09-06 18:20:11][354909110342312][6543 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02794e4f-f6cd-47b8-83a2-2a0a2ba791bb","id":"QR_02794e4f-f6cd-47b8-83a2-2a0a2ba791bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:20:11][354909110342312][6699 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-09-06 18:20:11][354909110342312][6699 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-09-06 18:20:11][354909110342312][6699 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:20:14][354909110342312][0 ms][INFO] === Request start === [2025-09-06 18:20:14][354909110342312][1 ms][DEBUG] START check_scloud [2025-09-06 18:20:14][354909110342312][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:20:15][354909110342312][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 10788 4991 23941588 149272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:20:15][354909110342312][264 ms][DEBUG] targetPkg: running [2025-09-06 18:20:15][354909110342312][264 ms][DEBUG] END check_scloud in 264 ms [2025-09-06 18:20:15][354909110342312][264 ms][DEBUG] START check_boot_completed [2025-09-06 18:20:15][354909110342312][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:20:15][354909110342312][311 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:20:15][354909110342312][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:20:15][354909110342312][373 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 18:20:15][354909110342312][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 18:20:15][354909110342312][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:20:15][354909110342312][469 ms][DEBUG] SU: done in 96 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6369\nsuccessfulTxPacketsPerSecond: 0.2455823091434759\nretriedTxPackets: 1568\nretriedTxPacketsPerSecond: 0.09674454602621778\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5674\nsuccessfulRxPacketsPerSecond: 0.1897681479745041\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:20:15][354909110342312][469 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:20:15][354909110342312][905 ms][DEBUG] SU: done in 435 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=315 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 315.044/315.044/315.044/0.000 ms\n [2025-09-06 18:20:15][354909110342312][905 ms][DEBUG] check_internet: online [2025-09-06 18:20:15][354909110342312][905 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:20:15][354909110342312][905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354909110342312\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5670\"}'\'' -e'"" [2025-09-06 18:20:15][354909110342312][905 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:20:15][354909110342312][905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354909110342312\",\"model\":\"SM-A715F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5670\"}'\'' -e'"" [2025-09-06 18:20:19][354909110342312][4794 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9fb63ee5-ff56-4c5f-ab23-103b6127e750","id":"QR_9fb63ee5-ff56-4c5f-ab23-103b6127e750","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:20:19][354909110342312][4950 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-09-06 18:20:19][354909110342312][4951 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-09-06 18:20:19][354909110342312][4951 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:20:23][350233971244465][0 ms][INFO] === Request start === [2025-09-06 18:20:23][350233971244465][1 ms][DEBUG] START check_scloud [2025-09-06 18:20:23][350233971244465][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:20:23][350233971244465][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 10788 4991 24112796 160220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:20:23][350233971244465][288 ms][DEBUG] targetPkg: running [2025-09-06 18:20:23][350233971244465][288 ms][DEBUG] END check_scloud in 287 ms [2025-09-06 18:20:23][350233971244465][288 ms][DEBUG] START check_boot_completed [2025-09-06 18:20:23][350233971244465][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:20:23][350233971244465][335 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:20:23][350233971244465][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:20:23][350233971244465][397 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 18:20:23][350233971244465][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 18:20:23][350233971244465][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:20:23][350233971244465][522 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6369\nsuccessfulTxPacketsPerSecond: 0.2455823091434759\nretriedTxPackets: 1568\nretriedTxPacketsPerSecond: 0.09674454602621778\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5674\nsuccessfulRxPacketsPerSecond: 0.1897681479745041\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:20:23][350233971244465][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:20:24][350233971244465][975 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=310 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 310.514/310.514/310.514/0.000 ms\n [2025-09-06 18:20:24][350233971244465][975 ms][DEBUG] check_internet: online [2025-09-06 18:20:24][350233971244465][975 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:20:24][350233971244465][975 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350233971244465\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8098\"}'\'' -e'"" [2025-09-06 18:20:24][350233971244465][975 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:20:24][350233971244465][975 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350233971244465\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8098\"}'\'' -e'"" [2025-09-06 18:20:28][350233971244465][5724 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a6dce01-0866-40fd-a46f-875dba36b637","id":"QR_6a6dce01-0866-40fd-a46f-875dba36b637","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:20:28][350233971244465][5880 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-09-06 18:20:28][350233971244465][5880 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 18:20:28][350233971244465][5880 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:20:32][350233971244465][0 ms][INFO] === Request start === [2025-09-06 18:20:32][350233971244465][1 ms][DEBUG] START check_scloud [2025-09-06 18:20:32][350233971244465][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:20:32][350233971244465][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 10788 4991 24226688 171140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:20:32][350233971244465][305 ms][DEBUG] targetPkg: running [2025-09-06 18:20:32][350233971244465][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 18:20:32][350233971244465][306 ms][DEBUG] START check_boot_completed [2025-09-06 18:20:32][350233971244465][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:20:32][350233971244465][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:20:32][350233971244465][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:20:32][350233971244465][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:20:32][350233971244465][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:20:32][350233971244465][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:20:32][350233971244465][508 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6369\nsuccessfulTxPacketsPerSecond: 0.2455823091434759\nretriedTxPackets: 1568\nretriedTxPacketsPerSecond: 0.09674454602621778\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5674\nsuccessfulRxPacketsPerSecond: 0.1897681479745041\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:20:32][350233971244465][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:20:33][350233971244465][838 ms][DEBUG] SU: done in 330 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.452/225.452/225.452/0.000 ms\n [2025-09-06 18:20:33][350233971244465][838 ms][DEBUG] check_internet: online [2025-09-06 18:20:33][350233971244465][838 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:20:33][350233971244465][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350233971244465\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7795\"}'\'' -e'"" [2025-09-06 18:20:33][350233971244465][839 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:20:33][350233971244465][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350233971244465\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7795\"}'\'' -e'"" [2025-09-06 18:20:36][350233971244465][4382 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb01947d-89b7-457f-a458-87087790934d","id":"QR_bb01947d-89b7-457f-a458-87087790934d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:20:37][350233971244465][4539 ms][DEBUG] proc_open done in 3700 ms; code=255; res.len=3343 [2025-09-06 18:20:37][350233971244465][4539 ms][DEBUG] END runCmdUntilRes#1 in 3700 ms [2025-09-06 18:20:37][350233971244465][4539 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:24:04][352589408245252][1 ms][INFO] === Request start === [2025-09-06 18:24:04][352589408245252][1 ms][DEBUG] START check_scloud [2025-09-06 18:24:04][352589408245252][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:24:05][352589408245252][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 10788 4991 24299484 183220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:24:05][352589408245252][305 ms][DEBUG] targetPkg: running [2025-09-06 18:24:05][352589408245252][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 18:24:05][352589408245252][305 ms][DEBUG] START check_boot_completed [2025-09-06 18:24:05][352589408245252][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:24:05][352589408245252][352 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:24:05][352589408245252][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:24:05][352589408245252][415 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 18:24:05][352589408245252][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 18:24:05][352589408245252][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:24:05][352589408245252][508 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6533\nsuccessfulTxPacketsPerSecond: 0.025381731169702427\nretriedTxPackets: 1625\nretriedTxPacketsPerSecond: 0.025381028306121357\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5815\nsuccessfulRxPacketsPerSecond: 9.262034105687795E-7\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:24:05][352589408245252][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:24:06][352589408245252][1899 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.854/300.854/300.854/0.000 ms\n [2025-09-06 18:24:06][352589408245252][1899 ms][DEBUG] check_internet: online [2025-09-06 18:24:06][352589408245252][1899 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:24:06][352589408245252][1899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589408245252\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3456\"}'\'' -e'"" [2025-09-06 18:24:06][352589408245252][1899 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:24:06][352589408245252][1899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589408245252\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3456\"}'\'' -e'"" [2025-09-06 18:24:11][352589408245252][6944 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c56eeee5-fdfe-46ed-965c-ef9d4e5aba6b","id":"QR_c56eeee5-fdfe-46ed-965c-ef9d4e5aba6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:24:11][352589408245252][7100 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-06 18:24:11][352589408245252][7101 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-06 18:24:11][352589408245252][7101 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:24:15][352589408245252][0 ms][INFO] === Request start === [2025-09-06 18:24:15][352589408245252][1 ms][DEBUG] START check_scloud [2025-09-06 18:24:15][352589408245252][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:24:15][352589408245252][259 ms][DEBUG] SU: done in 259 ms; outu0_a118 10788 4991 24431716 194016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:24:15][352589408245252][259 ms][DEBUG] targetPkg: running [2025-09-06 18:24:15][352589408245252][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-06 18:24:15][352589408245252][260 ms][DEBUG] START check_boot_completed [2025-09-06 18:24:15][352589408245252][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:24:15][352589408245252][306 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:24:15][352589408245252][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:24:15][352589408245252][353 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:24:15][352589408245252][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:24:15][352589408245252][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:24:15][352589408245252][447 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6533\nsuccessfulTxPacketsPerSecond: 0.025381731169702427\nretriedTxPackets: 1625\nretriedTxPacketsPerSecond: 0.025381028306121357\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5815\nsuccessfulRxPacketsPerSecond: 9.262034105687795E-7\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:24:15][352589408245252][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:24:16][352589408245252][853 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=312 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 312.400/312.400/312.400/0.000 ms\n [2025-09-06 18:24:16][352589408245252][853 ms][DEBUG] check_internet: online [2025-09-06 18:24:16][352589408245252][853 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:24:16][352589408245252][853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589408245252\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5918\"}'\'' -e'"" [2025-09-06 18:24:16][352589408245252][853 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:24:16][352589408245252][853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589408245252\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5918\"}'\'' -e'"" [2025-09-06 18:24:20][352589408245252][4774 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11f8782d-6254-4c77-bc0c-23b42c057236","id":"QR_11f8782d-6254-4c77-bc0c-23b42c057236","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:24:20][352589408245252][4930 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-09-06 18:24:20][352589408245252][4930 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-09-06 18:24:20][352589408245252][4930 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:25:11][][1 ms][INFO] === Request start === [2025-09-06 18:25:11][][1 ms][DEBUG] START check_scloud [2025-09-06 18:25:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:25:12][][1 ms][INFO] === Request start === [2025-09-06 18:25:12][][1 ms][DEBUG] START check_scloud [2025-09-06 18:25:12][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:25:12][][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 10788 4991 24531172 206104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:25:12][][284 ms][DEBUG] targetPkg: running [2025-09-06 18:25:12][][284 ms][DEBUG] END check_scloud in 283 ms [2025-09-06 18:25:12][][284 ms][DEBUG] START check_boot_completed [2025-09-06 18:25:12][][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:25:12][][315 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:25:12][][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:25:12][][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 10788 4991 24531172 206104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:25:12][][282 ms][DEBUG] targetPkg: running [2025-09-06 18:25:12][][282 ms][DEBUG] END check_scloud in 281 ms [2025-09-06 18:25:12][][282 ms][DEBUG] START check_boot_completed [2025-09-06 18:25:12][][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:25:12][][362 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:25:12][][362 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 18:25:12][][362 ms][DEBUG] rawBody.length=0 [2025-09-06 18:25:12][][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"\",\"profile_ID\":\"\",\"group\":\"\",\"type\":\"KC\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":null,\"email\":null,\"carrier\":null,\"os\":null,\"knoxSdkVersion\":null,\"deviceId\":null}'\'' -e'"" [2025-09-06 18:25:12][][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:25:12][][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"\",\"profile_ID\":\"\",\"group\":\"\",\"type\":\"KC\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":null,\"email\":null,\"carrier\":null,\"os\":null,\"knoxSdkVersion\":null,\"deviceId\":null}'\'' -e'"" [2025-09-06 18:25:12][][313 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:25:12][][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:25:12][][360 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:25:12][][361 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 18:25:12][][361 ms][DEBUG] rawBody.length=0 [2025-09-06 18:25:12][][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"\",\"profile_ID\":\"\",\"group\":\"\",\"type\":\"KC\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":null,\"email\":null,\"carrier\":null,\"os\":null,\"knoxSdkVersion\":null,\"deviceId\":null}'\'' -e'"" [2025-09-06 18:25:12][][361 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:25:12][][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"\",\"profile_ID\":\"\",\"group\":\"\",\"type\":\"KC\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":null,\"email\":null,\"carrier\":null,\"os\":null,\"knoxSdkVersion\":null,\"deviceId\":null}'\'' -e'"" [2025-09-06 18:25:13][][1563 ms][DEBUG] proc_open done in 1203 ms (timeout); code=4; out.len=0 err.len=135 [2025-09-06 18:25:13][][1563 ms][DEBUG] END runCmdUntilRes#1 in 1203 ms [2025-09-06 18:25:13][][1563 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5412 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5412 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-09-06 18:25:17][][5314 ms][DEBUG] frida res:res:{"code":4000000,"message":"RESOURCE_INVALID_PARAM","data":"Missing device UID from request"}\r\n [2025-09-06 18:25:17][][5470 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=92 [2025-09-06 18:25:17][][5470 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 18:25:17][][5470 ms][INFO] SUCCESS response from frida (len=92) [2025-09-06 18:26:05][353283325096431][1 ms][INFO] === Request start === [2025-09-06 18:26:05][353283325096431][1 ms][DEBUG] START check_scloud [2025-09-06 18:26:05][353283325096431][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:26:05][353283325096431][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 10788 4991 24638728 217100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:26:05][353283325096431][307 ms][DEBUG] targetPkg: running [2025-09-06 18:26:05][353283325096431][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 18:26:05][353283325096431][307 ms][DEBUG] START check_boot_completed [2025-09-06 18:26:05][353283325096431][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:26:05][353283325096431][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:26:05][353283325096431][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:26:05][353283325096431][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:26:05][353283325096431][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:26:05][353283325096431][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:26:05][353283325096431][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6533\nsuccessfulTxPacketsPerSecond: 0.025381731169702427\nretriedTxPackets: 1625\nretriedTxPacketsPerSecond: 0.025381028306121357\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5815\nsuccessfulRxPacketsPerSecond: 9.262034105687795E-7\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:26:05][353283325096431][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:26:06][353283325096431][948 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=340 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 340.464/340.464/340.464/0.000 ms\n [2025-09-06 18:26:06][353283325096431][948 ms][DEBUG] check_internet: online [2025-09-06 18:26:06][353283325096431][948 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:26:06][353283325096431][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283325096431\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9184\"}'\'' -e'"" [2025-09-06 18:26:06][353283325096431][948 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:26:06][353283325096431][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283325096431\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9184\"}'\'' -e'"" [2025-09-06 18:26:12][353283325096431][7024 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3ba5a35-601f-4f66-b8c5-c9fb0418c763","id":"QR_c3ba5a35-601f-4f66-b8c5-c9fb0418c763","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:26:12][353283325096431][7180 ms][DEBUG] proc_open done in 6232 ms; code=255; res.len=3343 [2025-09-06 18:26:12][353283325096431][7180 ms][DEBUG] END runCmdUntilRes#1 in 6232 ms [2025-09-06 18:26:12][353283325096431][7181 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:26:16][353283325096431][0 ms][INFO] === Request start === [2025-09-06 18:26:16][353283325096431][1 ms][DEBUG] START check_scloud [2025-09-06 18:26:16][353283325096431][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:26:16][353283325096431][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 10788 4991 24795536 228652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:26:16][353283325096431][314 ms][DEBUG] targetPkg: running [2025-09-06 18:26:16][353283325096431][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 18:26:16][353283325096431][314 ms][DEBUG] START check_boot_completed [2025-09-06 18:26:16][353283325096431][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:26:16][353283325096431][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:26:16][353283325096431][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:26:16][353283325096431][409 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 18:26:16][353283325096431][409 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 18:26:16][353283325096431][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:26:16][353283325096431][501 ms][DEBUG] SU: done in 92 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=37813 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6533\nsuccessfulTxPacketsPerSecond: 0.025381731169702427\nretriedTxPackets: 1625\nretriedTxPacketsPerSecond: 0.025381028306121357\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5815\nsuccessfulRxPacketsPerSecond: 9.262034105687795E-7\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:26:16][353283325096431][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:26:16][353283325096431][861 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.786/258.786/258.786/0.000 ms\n [2025-09-06 18:26:16][353283325096431][861 ms][DEBUG] check_internet: online [2025-09-06 18:26:16][353283325096431][861 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:26:16][353283325096431][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283325096431\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1292\"}'\'' -e'"" [2025-09-06 18:26:16][353283325096431][861 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:26:16][353283325096431][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283325096431\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1292\"}'\'' -e'"" [2025-09-06 18:26:20][353283325096431][4703 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5438659d-330a-4095-9328-97dfc82afd3c","id":"QR_5438659d-330a-4095-9328-97dfc82afd3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:26:20][353283325096431][4859 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-09-06 18:26:20][353283325096431][4859 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-09-06 18:26:20][353283325096431][4859 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:27:05][355738553331097][0 ms][INFO] === Request start === [2025-09-06 18:27:05][355738553331097][1 ms][DEBUG] START check_scloud [2025-09-06 18:27:05][355738553331097][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:27:05][355738553331097][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 10788 4991 24946256 239316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:27:05][355738553331097][314 ms][DEBUG] targetPkg: running [2025-09-06 18:27:05][355738553331097][314 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 18:27:05][355738553331097][314 ms][DEBUG] START check_boot_completed [2025-09-06 18:27:05][355738553331097][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:27:05][355738553331097][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:27:05][355738553331097][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:27:05][355738553331097][408 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 18:27:05][355738553331097][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 18:27:05][355738553331097][409 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:27:05][355738553331097][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738553331097\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7728\"}'\'' -e'"" [2025-09-06 18:27:05][355738553331097][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:27:05][355738553331097][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738553331097\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7728\"}'\'' -e'"" [2025-09-06 18:27:13][355738553331097][8281 ms][DEBUG] proc_open done in 7872 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 18:27:13][355738553331097][8281 ms][DEBUG] END runCmdUntilRes#1 in 7872 ms [2025-09-06 18:27:13][355738553331097][8281 ms][WARN] Detected error: Process with pid 10788 either refused to load frida-agent, or terminated during injectionProcess with pid 10788 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 18:27:13][355738553331097][8281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 18:27:13][355738553331097][8734 ms][DEBUG] SU: done in 452 ms; out [2025-09-06 18:27:13][355738553331097][8734 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 18:27:14][355738553331097][9187 ms][DEBUG] SU: done in 453 ms; out [2025-09-06 18:27:14][355738553331097][9187 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 18:27:14][355738553331097][9187 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 18:27:14][355738553331097][9656 ms][DEBUG] SU: done in 469 ms; out [2025-09-06 18:27:14][355738553331097][9656 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 18:27:15][355738553331097][9843 ms][DEBUG] SU: done in 187 ms; out [2025-09-06 18:27:17][355738553331097][11858 ms][DEBUG] START check_boot_completed [2025-09-06 18:27:17][355738553331097][11858 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:27:17][355738553331097][11905 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:27:17][355738553331097][11905 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:27:17][355738553331097][11952 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:27:17][355738553331097][11952 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 18:27:20][355738553331097][14967 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 18:27:20][355738553331097][14967 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738553331097\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7728\"}'\'' -e'"" [2025-09-06 18:27:21][355738553331097][16420 ms][DEBUG] proc_open done in 1453 ms (timeout); code=4; out.len=0 err.len=1015 [2025-09-06 18:27:21][355738553331097][16420 ms][DEBUG] END runCmdUntilRes#2 in 1453 ms [2025-09-06 18:27:21][355738553331097][16420 ms][WARN] Detected error 2; Reboot the device [2025-09-06 18:27:21][355738553331097][16420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 18:27:21][355738553331097][16685 ms][DEBUG] SU: done in 265 ms; outsystem 13482 13140 7514428 132840 binder_ioctl 0 S system_server\n [2025-09-06 18:27:21][355738553331097][16685 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-09-06 18:27:22][355738553331097][17325 ms][DEBUG] SU: done in 640 ms; out [2025-09-06 18:28:05][355738553331097][0 ms][INFO] === Request start === [2025-09-06 18:28:05][355738553331097][1 ms][DEBUG] START check_scloud [2025-09-06 18:28:05][355738553331097][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:28:05][355738553331097][30 ms][DEBUG] SU: done in 29 ms; out [2025-09-06 18:28:05][355738553331097][30 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 18:28:05][355738553331097][61 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-09-06 18:28:05][355738553331097][61 ms][WARN] check_devices: no device [2025-09-06 18:28:05][355738553331097][61 ms][WARN] check_devices: no device [2025-09-06 18:28:05][355738553331097][61 ms][DEBUG] END check_scloud in 61 ms [2025-09-06 18:29:04][355738553331097][1 ms][INFO] === Request start === [2025-09-06 18:29:04][355738553331097][1 ms][DEBUG] START check_scloud [2025-09-06 18:29:04][355738553331097][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:29:04][355738553331097][354 ms][DEBUG] SU: done in 353 ms; out [2025-09-06 18:29:04][355738553331097][354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 18:29:05][355738553331097][401 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 18:29:05][355738553331097][401 ms][DEBUG] check_devices: device found [2025-09-06 18:29:05][355738553331097][401 ms][WARN] targetPkg: not running, restarting [2025-09-06 18:29:05][355738553331097][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 18:29:05][355738553331097][557 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 18:29:05][355738553331097][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 18:29:05][355738553331097][855 ms][DEBUG] SU: done in 298 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 18:29:07][355738553331097][2869 ms][DEBUG] END check_scloud in 2868 ms [2025-09-06 18:29:07][355738553331097][2869 ms][DEBUG] START check_boot_completed [2025-09-06 18:29:07][355738553331097][2869 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:29:07][355738553331097][2916 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:29:07][355738553331097][2916 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:29:07][355738553331097][2978 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 18:29:07][355738553331097][2978 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 18:29:07][355738553331097][2978 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:29:07][355738553331097][2978 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738553331097\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9403\"}'\'' -e'"" [2025-09-06 18:29:07][355738553331097][2978 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:29:07][355738553331097][2978 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738553331097\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9403\"}'\'' -e'"" [2025-09-06 18:29:16][355738553331097][11617 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce292d25-8f0a-487d-bbc7-f442160fd36a","id":"QR_ce292d25-8f0a-487d-bbc7-f442160fd36a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:29:16][355738553331097][11773 ms][DEBUG] proc_open done in 8795 ms; code=255; res.len=3343 [2025-09-06 18:29:16][355738553331097][11773 ms][DEBUG] END runCmdUntilRes#1 in 8795 ms [2025-09-06 18:29:16][355738553331097][11773 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:29:20][355738553331097][0 ms][INFO] === Request start === [2025-09-06 18:29:20][355738553331097][1 ms][DEBUG] START check_scloud [2025-09-06 18:29:20][355738553331097][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:29:20][355738553331097][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 11327 4970 23852964 105772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:29:20][355738553331097][310 ms][DEBUG] targetPkg: running [2025-09-06 18:29:20][355738553331097][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 18:29:20][355738553331097][310 ms][DEBUG] START check_boot_completed [2025-09-06 18:29:20][355738553331097][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:29:20][355738553331097][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:29:20][355738553331097][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:29:20][355738553331097][419 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 18:29:20][355738553331097][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 18:29:20][355738553331097][420 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:29:20][355738553331097][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738553331097\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9379\"}'\'' -e'"" [2025-09-06 18:29:20][355738553331097][420 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:29:20][355738553331097][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355738553331097\",\"model\":\"SM-A156M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9379\"}'\'' -e'"" [2025-09-06 18:29:25][355738553331097][5730 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf651104-a51a-485e-8115-3018e4a00c02","id":"QR_bf651104-a51a-485e-8115-3018e4a00c02","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:29:25][355738553331097][5887 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-09-06 18:29:25][355738553331097][5887 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-09-06 18:29:25][355738553331097][5887 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:29:30][352967352222065][0 ms][INFO] === Request start === [2025-09-06 18:29:30][352967352222065][1 ms][DEBUG] START check_scloud [2025-09-06 18:29:30][352967352222065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:29:30][352967352222065][377 ms][DEBUG] SU: done in 376 ms; outu0_a118 11327 4970 24039672 110180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:29:30][352967352222065][377 ms][DEBUG] targetPkg: running [2025-09-06 18:29:30][352967352222065][377 ms][DEBUG] END check_scloud in 376 ms [2025-09-06 18:29:30][352967352222065][377 ms][DEBUG] START check_boot_completed [2025-09-06 18:29:30][352967352222065][377 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:29:30][352967352222065][423 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:29:30][352967352222065][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:29:30][352967352222065][472 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 18:29:30][352967352222065][472 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 18:29:30][352967352222065][472 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:29:30][352967352222065][472 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352222065\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8354\"}'\'' -e'"" [2025-09-06 18:29:30][352967352222065][472 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:29:30][352967352222065][472 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352222065\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8354\"}'\'' -e'"" [2025-09-06 18:29:35][352967352222065][4672 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 18:29:35][352967352222065][4828 ms][DEBUG] proc_open done in 4356 ms; code=255; res.len=115 [2025-09-06 18:29:35][352967352222065][4828 ms][DEBUG] END runCmdUntilRes#1 in 4357 ms [2025-09-06 18:29:35][352967352222065][4829 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 18:29:35][][0 ms][INFO] === Request start === [2025-09-06 18:29:35][][1 ms][DEBUG] START check_scloud [2025-09-06 18:29:35][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:29:35][][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 11327 4970 24161820 103484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:29:35][][305 ms][DEBUG] targetPkg: running [2025-09-06 18:29:35][][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 18:29:35][][305 ms][DEBUG] START check_boot_completed [2025-09-06 18:29:35][][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:29:35][][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:29:35][][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:29:35][][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:29:35][][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 18:29:35][][383 ms][DEBUG] rawBody.length=1141 [2025-09-06 18:29:35][][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8TB06QN0E\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-09-06 18:29:35][][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:29:35][][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8TB06QN0E\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8197\"}'\'' -e'"" [2025-09-06 18:29:40][][4757 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 18:29:40][][4914 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=115 [2025-09-06 18:29:40][][4914 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-06 18:29:40][][4914 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 18:29:41][352967352222065][0 ms][INFO] === Request start === [2025-09-06 18:29:41][352967352222065][1 ms][DEBUG] START check_scloud [2025-09-06 18:29:41][352967352222065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:29:41][352967352222065][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 11327 4970 24212020 104092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:29:41][352967352222065][280 ms][DEBUG] targetPkg: running [2025-09-06 18:29:41][352967352222065][280 ms][DEBUG] END check_scloud in 280 ms [2025-09-06 18:29:41][352967352222065][280 ms][DEBUG] START check_boot_completed [2025-09-06 18:29:41][352967352222065][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:29:41][352967352222065][327 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:29:41][352967352222065][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:29:41][352967352222065][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:29:41][352967352222065][374 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:29:41][352967352222065][374 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:29:41][352967352222065][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352222065\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2551\"}'\'' -e'"" [2025-09-06 18:29:41][352967352222065][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:29:41][352967352222065][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352222065\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2551\"}'\'' -e'"" [2025-09-06 18:30:07][352967352222065][1 ms][INFO] === Request start === [2025-09-06 18:30:07][352967352222065][1 ms][DEBUG] START check_scloud [2025-09-06 18:30:07][352967352222065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:30:07][352967352222065][440 ms][DEBUG] SU: done in 439 ms; out [2025-09-06 18:30:07][352967352222065][440 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 18:30:07][352967352222065][487 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 18:30:07][352967352222065][487 ms][DEBUG] check_devices: device found [2025-09-06 18:30:07][352967352222065][487 ms][WARN] targetPkg: not running, restarting [2025-09-06 18:30:07][352967352222065][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 18:30:07][352967352222065][659 ms][DEBUG] SU: done in 172 ms; out [2025-09-06 18:30:07][352967352222065][659 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 18:30:08][352967352222065][1159 ms][DEBUG] SU: done in 500 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 18:30:10][352967352222065][3174 ms][DEBUG] END check_scloud in 3173 ms [2025-09-06 18:30:10][352967352222065][3174 ms][DEBUG] START check_boot_completed [2025-09-06 18:30:10][352967352222065][3174 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:30:10][352967352222065][3220 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:30:10][352967352222065][3221 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:30:10][352967352222065][3283 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 18:30:10][352967352222065][3283 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 18:30:10][352967352222065][3283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:30:11][352967352222065][3720 ms][DEBUG] SU: done in 437 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is not connected\n [2025-09-06 18:30:11][352967352222065][3721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:30:11][352967352222065][4002 ms][DEBUG] SU: done in 281 ms; out [2025-09-06 18:30:11][352967352222065][4002 ms][WARN] check_internet: offline [2025-09-06 18:30:41][355914467466887][0 ms][INFO] === Request start === [2025-09-06 18:30:41][355914467466887][1 ms][DEBUG] START check_scloud [2025-09-06 18:30:41][355914467466887][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:30:42][355914467466887][472 ms][DEBUG] SU: done in 472 ms; out [2025-09-06 18:30:42][355914467466887][472 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-09-06 18:30:42][355914467466887][519 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-09-06 18:30:42][355914467466887][519 ms][DEBUG] check_devices: device found [2025-09-06 18:30:42][355914467466887][519 ms][WARN] targetPkg: not running, restarting [2025-09-06 18:30:42][355914467466887][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 18:30:42][355914467466887][675 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 18:30:42][355914467466887][675 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 18:30:42][355914467466887][972 ms][DEBUG] SU: done in 297 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 18:30:44][355914467466887][2987 ms][DEBUG] END check_scloud in 2986 ms [2025-09-06 18:30:44][355914467466887][2987 ms][DEBUG] START check_boot_completed [2025-09-06 18:30:44][355914467466887][2987 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:30:44][355914467466887][3034 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:30:44][355914467466887][3034 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:30:44][355914467466887][3096 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 18:30:44][355914467466887][3096 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 18:30:44][355914467466887][3096 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:30:44][355914467466887][3362 ms][DEBUG] SU: done in 266 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 157\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 14\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 149\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:30:44][355914467466887][3363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:30:45][355914467466887][4206 ms][DEBUG] SU: done in 843 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.537/299.537/299.537/0.000 ms\n [2025-09-06 18:30:45][355914467466887][4206 ms][DEBUG] check_internet: online [2025-09-06 18:30:45][355914467466887][4206 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:30:45][355914467466887][4206 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355914467466887\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5912\"}'\'' -e'"" [2025-09-06 18:30:45][355914467466887][4206 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:30:45][355914467466887][4206 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355914467466887\",\"model\":\"SM-A346B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5912\"}'\'' -e'"" [2025-09-06 18:30:50][355914467466887][9064 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a658b25b-d068-42c1-854b-e8e7d3c675b9","id":"QR_a658b25b-d068-42c1-854b-e8e7d3c675b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:30:50][355914467466887][9220 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-09-06 18:30:50][355914467466887][9220 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 18:30:50][355914467466887][9220 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:32:05][355707114824700][0 ms][INFO] === Request start === [2025-09-06 18:32:05][355707114824700][1 ms][DEBUG] START check_scloud [2025-09-06 18:32:05][355707114824700][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:32:05][355707114824700][355 ms][DEBUG] SU: done in 355 ms; outu0_a118 21955 16311 23597432 61736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:32:05][355707114824700][355 ms][DEBUG] targetPkg: running [2025-09-06 18:32:05][355707114824700][356 ms][DEBUG] END check_scloud in 355 ms [2025-09-06 18:32:05][355707114824700][356 ms][DEBUG] START check_boot_completed [2025-09-06 18:32:05][355707114824700][356 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:32:05][355707114824700][402 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:32:05][355707114824700][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:32:05][355707114824700][451 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 18:32:05][355707114824700][451 ms][DEBUG] END check_boot_completed in 96 ms [2025-09-06 18:32:05][355707114824700][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:32:05][355707114824700][575 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 827\nsuccessfulTxPacketsPerSecond: 9.762302584688886\nretriedTxPackets: 126\nretriedTxPacketsPerSecond: 1.8339040302608463\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 854\nsuccessfulRxPacketsPerSecond: 9.389468423997007\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:32:05][355707114824700][575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:32:06][355707114824700][934 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.199/249.199/249.199/0.000 ms\n [2025-09-06 18:32:06][355707114824700][935 ms][DEBUG] check_internet: online [2025-09-06 18:32:06][355707114824700][935 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:32:06][355707114824700][935 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114824700\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8247\"}'\'' -e'"" [2025-09-06 18:32:06][355707114824700][935 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:32:06][355707114824700][935 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114824700\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8247\"}'\'' -e'"" [2025-09-06 18:32:11][355707114824700][6432 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbfbcba1-40bf-40ec-9df8-e8aa7492933c","id":"QR_bbfbcba1-40bf-40ec-9df8-e8aa7492933c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:32:11][355707114824700][6588 ms][DEBUG] proc_open done in 5653 ms; code=255; res.len=3343 [2025-09-06 18:32:11][355707114824700][6588 ms][DEBUG] END runCmdUntilRes#1 in 5654 ms [2025-09-06 18:32:11][355707114824700][6588 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:32:15][355707114824700][1 ms][INFO] === Request start === [2025-09-06 18:32:15][355707114824700][1 ms][DEBUG] START check_scloud [2025-09-06 18:32:15][355707114824700][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:32:15][355707114824700][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 21955 16311 23762368 83268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:32:15][355707114824700][274 ms][DEBUG] targetPkg: running [2025-09-06 18:32:15][355707114824700][274 ms][DEBUG] END check_scloud in 273 ms [2025-09-06 18:32:15][355707114824700][274 ms][DEBUG] START check_boot_completed [2025-09-06 18:32:15][355707114824700][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:32:15][355707114824700][321 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:32:15][355707114824700][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:32:15][355707114824700][368 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:32:15][355707114824700][368 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:32:15][355707114824700][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:32:15][355707114824700][477 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 827\nsuccessfulTxPacketsPerSecond: 9.762302584688886\nretriedTxPackets: 126\nretriedTxPacketsPerSecond: 1.8339040302608463\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 854\nsuccessfulRxPacketsPerSecond: 9.389468423997007\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:32:15][355707114824700][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:32:16][355707114824700][805 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.210/218.210/218.210/0.000 ms\n [2025-09-06 18:32:16][355707114824700][805 ms][DEBUG] check_internet: online [2025-09-06 18:32:16][355707114824700][806 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:32:16][355707114824700][806 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114824700\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8647\"}'\'' -e'"" [2025-09-06 18:32:16][355707114824700][806 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:32:16][355707114824700][806 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114824700\",\"model\":\"SM-A515F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8647\"}'\'' -e'"" [2025-09-06 18:32:20][355707114824700][4820 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8da6887f-6307-4192-b495-9b14af4257f0","id":"QR_8da6887f-6307-4192-b495-9b14af4257f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:32:20][355707114824700][4976 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-09-06 18:32:20][355707114824700][4976 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-09-06 18:32:20][355707114824700][4976 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:33:03][352397455685713][0 ms][INFO] === Request start === [2025-09-06 18:33:03][352397455685713][1 ms][DEBUG] START check_scloud [2025-09-06 18:33:03][352397455685713][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:33:03][352397455685713][280 ms][DEBUG] SU: done in 280 ms; outu0_a118 21955 16311 23879284 96600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:33:03][352397455685713][280 ms][DEBUG] targetPkg: running [2025-09-06 18:33:03][352397455685713][280 ms][DEBUG] END check_scloud in 280 ms [2025-09-06 18:33:03][352397455685713][281 ms][DEBUG] START check_boot_completed [2025-09-06 18:33:03][352397455685713][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:33:03][352397455685713][327 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:33:03][352397455685713][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:33:04][352397455685713][374 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:33:04][352397455685713][374 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:33:04][352397455685713][374 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:33:04][352397455685713][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397455685713\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1150\"}'\'' -e'"" [2025-09-06 18:33:04][352397455685713][374 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:33:04][352397455685713][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397455685713\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1150\"}'\'' -e'"" [2025-09-06 18:33:07][352397455685713][3779 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b70fe52b-fb01-4750-917f-2d3e02fec9a4","id":"QR_b70fe52b-fb01-4750-917f-2d3e02fec9a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:33:07][352397455685713][3935 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-09-06 18:33:07][352397455685713][3935 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-09-06 18:33:07][352397455685713][3936 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:33:10][352397455685713][0 ms][INFO] === Request start === [2025-09-06 18:33:10][352397455685713][1 ms][DEBUG] START check_scloud [2025-09-06 18:33:10][352397455685713][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:33:10][352397455685713][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 21955 16311 24019708 107752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:33:10][352397455685713][302 ms][DEBUG] targetPkg: running [2025-09-06 18:33:10][352397455685713][302 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 18:33:10][352397455685713][302 ms][DEBUG] START check_boot_completed [2025-09-06 18:33:10][352397455685713][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:33:10][352397455685713][349 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:33:10][352397455685713][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:33:11][352397455685713][427 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 18:33:11][352397455685713][427 ms][DEBUG] END check_boot_completed in 125 ms [2025-09-06 18:33:11][352397455685713][427 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:33:11][352397455685713][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397455685713\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1537\"}'\'' -e'"" [2025-09-06 18:33:11][352397455685713][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:33:11][352397455685713][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397455685713\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1537\"}'\'' -e'"" [2025-09-06 18:33:17][352397455685713][6597 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7970e7f2-ebb8-41f5-83bd-74991e3095ae","id":"QR_7970e7f2-ebb8-41f5-83bd-74991e3095ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:33:17][352397455685713][6753 ms][DEBUG] proc_open done in 6326 ms; code=255; res.len=3343 [2025-09-06 18:33:17][352397455685713][6753 ms][DEBUG] END runCmdUntilRes#1 in 6326 ms [2025-09-06 18:33:17][352397455685713][6753 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:34:05][355128635698848][0 ms][INFO] === Request start === [2025-09-06 18:34:05][355128635698848][1 ms][DEBUG] START check_scloud [2025-09-06 18:34:05][355128635698848][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:34:05][355128635698848][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 21955 16311 24139708 118924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:34:05][355128635698848][311 ms][DEBUG] targetPkg: running [2025-09-06 18:34:05][355128635698848][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 18:34:05][355128635698848][311 ms][DEBUG] START check_boot_completed [2025-09-06 18:34:05][355128635698848][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:34:05][355128635698848][356 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 18:34:05][355128635698848][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:34:05][355128635698848][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:34:05][355128635698848][403 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 18:34:05][355128635698848][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:34:05][355128635698848][513 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 827\nsuccessfulTxPacketsPerSecond: 9.762302584688886\nretriedTxPackets: 126\nretriedTxPacketsPerSecond: 1.8339040302608463\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 854\nsuccessfulRxPacketsPerSecond: 9.389468423997007\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:34:05][355128635698848][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:34:06][355128635698848][966 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=342 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 342.424/342.424/342.424/0.000 ms\n [2025-09-06 18:34:06][355128635698848][966 ms][DEBUG] check_internet: online [2025-09-06 18:34:06][355128635698848][966 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:34:06][355128635698848][966 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128635698848\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6046\"}'\'' -e'"" [2025-09-06 18:34:06][355128635698848][966 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:34:06][355128635698848][966 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128635698848\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6046\"}'\'' -e'"" [2025-09-06 18:34:10][355128635698848][5808 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f759141e-90fb-4a12-91f5-3550570852c7","id":"QR_f759141e-90fb-4a12-91f5-3550570852c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:34:11][355128635698848][5964 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-06 18:34:11][355128635698848][5964 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-06 18:34:11][355128635698848][5964 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:34:14][355128635698848][0 ms][INFO] === Request start === [2025-09-06 18:34:14][355128635698848][1 ms][DEBUG] START check_scloud [2025-09-06 18:34:14][355128635698848][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:34:14][355128635698848][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 21955 16311 24308420 130904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:34:14][355128635698848][333 ms][DEBUG] targetPkg: running [2025-09-06 18:34:14][355128635698848][333 ms][DEBUG] END check_scloud in 332 ms [2025-09-06 18:34:14][355128635698848][333 ms][DEBUG] START check_boot_completed [2025-09-06 18:34:14][355128635698848][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:34:14][355128635698848][380 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:34:14][355128635698848][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:34:15][355128635698848][426 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:34:15][355128635698848][426 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:34:15][355128635698848][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:34:15][355128635698848][536 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 827\nsuccessfulTxPacketsPerSecond: 9.762302584688886\nretriedTxPackets: 126\nretriedTxPacketsPerSecond: 1.8339040302608463\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 854\nsuccessfulRxPacketsPerSecond: 9.389468423997007\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:34:15][355128635698848][536 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:34:15][355128635698848][927 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.583/292.583/292.583/0.000 ms\n [2025-09-06 18:34:15][355128635698848][927 ms][DEBUG] check_internet: online [2025-09-06 18:34:15][355128635698848][927 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:34:15][355128635698848][927 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128635698848\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2252\"}'\'' -e'"" [2025-09-06 18:34:15][355128635698848][927 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:34:15][355128635698848][927 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128635698848\",\"model\":\"SM-M325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2252\"}'\'' -e'"" [2025-09-06 18:34:20][355128635698848][5472 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81ab36eb-522a-4559-8023-e782c5b2933d","id":"QR_81ab36eb-522a-4559-8023-e782c5b2933d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:34:20][355128635698848][5628 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-09-06 18:34:20][355128635698848][5628 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-09-06 18:34:20][355128635698848][5628 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:39:05][356115237930330][1 ms][INFO] === Request start === [2025-09-06 18:39:05][356115237930330][1 ms][DEBUG] START check_scloud [2025-09-06 18:39:05][356115237930330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:39:05][356115237930330][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 21955 16311 24442876 143464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:39:05][356115237930330][268 ms][DEBUG] targetPkg: running [2025-09-06 18:39:05][356115237930330][268 ms][DEBUG] END check_scloud in 267 ms [2025-09-06 18:39:05][356115237930330][268 ms][DEBUG] START check_boot_completed [2025-09-06 18:39:05][356115237930330][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:39:05][356115237930330][299 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:39:05][356115237930330][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:39:05][356115237930330][346 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:39:05][356115237930330][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 18:39:05][356115237930330][346 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:39:05][356115237930330][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356115237930330\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8216\"}'\'' -e'"" [2025-09-06 18:39:05][356115237930330][346 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:39:05][356115237930330][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356115237930330\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8216\"}'\'' -e'"" [2025-09-06 18:39:11][356115237930330][6454 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba16c7c5-187f-4f8e-9211-ed709b810dec","id":"QR_ba16c7c5-187f-4f8e-9211-ed709b810dec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:39:11][356115237930330][6611 ms][DEBUG] proc_open done in 6264 ms; code=255; res.len=3343 [2025-09-06 18:39:11][356115237930330][6611 ms][DEBUG] END runCmdUntilRes#1 in 6264 ms [2025-09-06 18:39:11][356115237930330][6611 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:39:15][356115237930330][0 ms][INFO] === Request start === [2025-09-06 18:39:15][356115237930330][1 ms][DEBUG] START check_scloud [2025-09-06 18:39:15][356115237930330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:39:15][356115237930330][275 ms][DEBUG] SU: done in 275 ms; outu0_a118 21955 16311 24593540 155360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:39:15][356115237930330][276 ms][DEBUG] targetPkg: running [2025-09-06 18:39:15][356115237930330][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-06 18:39:15][356115237930330][276 ms][DEBUG] START check_boot_completed [2025-09-06 18:39:15][356115237930330][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:39:15][356115237930330][321 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 18:39:15][356115237930330][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:39:15][356115237930330][367 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:39:15][356115237930330][367 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-06 18:39:15][356115237930330][367 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:39:15][356115237930330][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356115237930330\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9715\"}'\'' -e'"" [2025-09-06 18:39:15][356115237930330][367 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:39:15][356115237930330][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356115237930330\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9715\"}'\'' -e'"" [2025-09-06 18:39:19][356115237930330][4085 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b620b526-ec2d-49fb-9d21-3added983275","id":"QR_b620b526-ec2d-49fb-9d21-3added983275","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:39:19][356115237930330][4241 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-09-06 18:39:19][356115237930330][4241 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-06 18:39:19][356115237930330][4242 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:39:21][358615314047559][0 ms][INFO] === Request start === [2025-09-06 18:39:21][358615314047559][1 ms][DEBUG] START check_scloud [2025-09-06 18:39:21][358615314047559][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:39:21][358615314047559][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 21955 16311 24768780 166092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:39:21][358615314047559][320 ms][DEBUG] targetPkg: running [2025-09-06 18:39:21][358615314047559][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 18:39:21][358615314047559][320 ms][DEBUG] START check_boot_completed [2025-09-06 18:39:21][358615314047559][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:39:22][358615314047559][366 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:39:22][358615314047559][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:39:22][358615314047559][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:39:22][358615314047559][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:39:22][358615314047559][413 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:39:22][358615314047559][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615314047559\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9090\"}'\'' -e'"" [2025-09-06 18:39:22][358615314047559][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:39:22][358615314047559][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615314047559\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9090\"}'\'' -e'"" [2025-09-06 18:39:25][358615314047559][3943 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d01387c4-f6c4-46e1-b68b-8f9a587ea08c","id":"QR_d01387c4-f6c4-46e1-b68b-8f9a587ea08c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:39:25][358615314047559][4100 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-09-06 18:39:25][358615314047559][4100 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-09-06 18:39:25][358615314047559][4100 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:39:28][358615314047559][0 ms][INFO] === Request start === [2025-09-06 18:39:28][358615314047559][1 ms][DEBUG] START check_scloud [2025-09-06 18:39:28][358615314047559][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:39:28][358615314047559][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 21955 16311 24927728 177680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:39:28][358615314047559][302 ms][DEBUG] targetPkg: running [2025-09-06 18:39:28][358615314047559][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 18:39:28][358615314047559][302 ms][DEBUG] START check_boot_completed [2025-09-06 18:39:28][358615314047559][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:39:28][358615314047559][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:39:28][358615314047559][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:39:28][358615314047559][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:39:28][358615314047559][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:39:28][358615314047559][395 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:39:28][358615314047559][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615314047559\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8493\"}'\'' -e'"" [2025-09-06 18:39:28][358615314047559][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:39:28][358615314047559][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615314047559\",\"model\":\"SM-S711B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8493\"}'\'' -e'"" [2025-09-06 18:39:33][358615314047559][5081 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b90c3312-050a-4a8e-9b0b-42533283cb1d","id":"QR_b90c3312-050a-4a8e-9b0b-42533283cb1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:39:33][358615314047559][5238 ms][DEBUG] proc_open done in 4843 ms; code=255; res.len=3343 [2025-09-06 18:39:33][358615314047559][5238 ms][DEBUG] END runCmdUntilRes#1 in 4843 ms [2025-09-06 18:39:33][358615314047559][5238 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:41:03][357962505809210][0 ms][INFO] === Request start === [2025-09-06 18:41:03][357962505809210][1 ms][DEBUG] START check_scloud [2025-09-06 18:41:03][357962505809210][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:41:03][357962505809210][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 21955 16311 25019020 188836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:41:03][357962505809210][304 ms][DEBUG] targetPkg: running [2025-09-06 18:41:03][357962505809210][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 18:41:03][357962505809210][304 ms][DEBUG] START check_boot_completed [2025-09-06 18:41:03][357962505809210][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:41:03][357962505809210][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:41:03][357962505809210][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:41:04][357962505809210][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:41:04][357962505809210][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 18:41:04][357962505809210][382 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:41:04][357962505809210][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505809210\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4637\"}'\'' -e'"" [2025-09-06 18:41:04][357962505809210][382 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:41:04][357962505809210][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505809210\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4637\"}'\'' -e'"" [2025-09-06 18:41:08][357962505809210][4647 ms][DEBUG] proc_open done in 4264 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 18:41:08][357962505809210][4647 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-09-06 18:41:08][357962505809210][4647 ms][WARN] Detected error: Process with pid 21955 either refused to load frida-agent, or terminated during injectionProcess with pid 21955 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 18:41:08][357962505809210][4647 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 18:41:08][357962505809210][4912 ms][DEBUG] SU: done in 266 ms; outsystem 16544 16311 12772276 276596 ep_poll 0 S system_server\n [2025-09-06 18:41:08][357962505809210][4912 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 18:41:08][357962505809210][5053 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 18:41:08][357962505809210][5053 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 18:41:08][357962505809210][5053 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 18:41:08][357962505809210][5178 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 18:41:08][357962505809210][5178 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 18:41:08][357962505809210][5365 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 18:41:10][357962505809210][7380 ms][DEBUG] START check_boot_completed [2025-09-06 18:41:10][357962505809210][7380 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:41:11][357962505809210][7427 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:41:11][357962505809210][7427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:41:11][357962505809210][7474 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:41:11][357962505809210][7474 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 18:41:14][357962505809210][10489 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 18:41:14][357962505809210][10489 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505809210\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4637\"}'\'' -e'"" [2025-09-06 18:41:18][357962505809210][14394 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f637375-cd59-4741-a8bd-b77d0e3ef88c","id":"QR_2f637375-cd59-4741-a8bd-b77d0e3ef88c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:41:18][357962505809210][14551 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-06 18:41:18][357962505809210][14551 ms][DEBUG] END runCmdUntilRes#2 in 4062 ms [2025-09-06 18:41:18][357962505809210][14551 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:41:20][357962505809210][1 ms][INFO] === Request start === [2025-09-06 18:41:20][357962505809210][1 ms][DEBUG] START check_scloud [2025-09-06 18:41:20][357962505809210][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:41:21][357962505809210][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 30254 16311 23678688 126100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:41:21][357962505809210][256 ms][DEBUG] targetPkg: running [2025-09-06 18:41:21][357962505809210][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-06 18:41:21][357962505809210][256 ms][DEBUG] START check_boot_completed [2025-09-06 18:41:21][357962505809210][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:41:21][357962505809210][287 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 18:41:21][357962505809210][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:41:21][357962505809210][334 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:41:21][357962505809210][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 18:41:21][357962505809210][334 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:41:21][357962505809210][334 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505809210\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3604\"}'\'' -e'"" [2025-09-06 18:41:21][357962505809210][334 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:41:21][357962505809210][334 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505809210\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3604\"}'\'' -e'"" [2025-09-06 18:41:26][357962505809210][5489 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24172d81-b66e-492e-8a89-721572f3c26c","id":"QR_24172d81-b66e-492e-8a89-721572f3c26c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:41:26][357962505809210][5646 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-09-06 18:41:26][357962505809210][5646 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 18:41:26][357962505809210][5646 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:43:04][354046112719435][0 ms][INFO] === Request start === [2025-09-06 18:43:04][354046112719435][1 ms][DEBUG] START check_scloud [2025-09-06 18:43:04][354046112719435][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:43:04][354046112719435][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 30254 16311 23740952 139332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:43:04][354046112719435][321 ms][DEBUG] targetPkg: running [2025-09-06 18:43:04][354046112719435][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 18:43:04][354046112719435][321 ms][DEBUG] START check_boot_completed [2025-09-06 18:43:04][354046112719435][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:43:04][354046112719435][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:43:04][354046112719435][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:43:04][354046112719435][415 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:43:04][354046112719435][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:43:04][354046112719435][415 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:43:04][354046112719435][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354046112719435\",\"model\":\"SM-A505F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"E28\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3272\"}'\'' -e'"" [2025-09-06 18:43:04][354046112719435][415 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:43:04][354046112719435][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354046112719435\",\"model\":\"SM-A505F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"E28\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3272\"}'\'' -e'"" [2025-09-06 18:43:08][354046112719435][4429 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 18:43:08][354046112719435][4586 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=115 [2025-09-06 18:43:08][354046112719435][4586 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-09-06 18:43:08][354046112719435][4586 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 18:43:09][][0 ms][INFO] === Request start === [2025-09-06 18:43:09][][1 ms][DEBUG] START check_scloud [2025-09-06 18:43:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:43:09][][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 30254 16311 23897952 151088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:43:09][][312 ms][DEBUG] targetPkg: running [2025-09-06 18:43:09][][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 18:43:09][][312 ms][DEBUG] START check_boot_completed [2025-09-06 18:43:09][][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:43:09][][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:43:09][][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:43:09][][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:43:09][][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:43:09][][406 ms][DEBUG] rawBody.length=1131 [2025-09-06 18:43:09][][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A505F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58N23A5FWA\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"E28\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1962\"}'\'' -e'"" [2025-09-06 18:43:09][][406 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:43:09][][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A505F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58N23A5FWA\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"E28\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1962\"}'\'' -e'"" [2025-09-06 18:43:12][][3546 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 18:43:12][][3702 ms][DEBUG] proc_open done in 3296 ms; code=255; res.len=115 [2025-09-06 18:43:12][][3702 ms][DEBUG] END runCmdUntilRes#1 in 3296 ms [2025-09-06 18:43:12][][3702 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 18:43:14][354046112719435][0 ms][INFO] === Request start === [2025-09-06 18:43:14][354046112719435][1 ms][DEBUG] START check_scloud [2025-09-06 18:43:14][354046112719435][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:43:14][354046112719435][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 30254 16311 24049692 162476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:43:14][354046112719435][260 ms][DEBUG] targetPkg: running [2025-09-06 18:43:14][354046112719435][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-06 18:43:14][354046112719435][260 ms][DEBUG] START check_boot_completed [2025-09-06 18:43:14][354046112719435][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:43:14][354046112719435][290 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 18:43:14][354046112719435][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:43:14][354046112719435][337 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:43:14][354046112719435][337 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 18:43:14][354046112719435][337 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:43:14][354046112719435][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354046112719435\",\"model\":\"SM-A505F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"E28\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9734\"}'\'' -e'"" [2025-09-06 18:43:14][354046112719435][337 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:43:14][354046112719435][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354046112719435\",\"model\":\"SM-A505F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"E28\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9734\"}'\'' -e'"" [2025-09-06 18:43:19][354046112719435][5336 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ad0d600-8fac-4397-a4ee-d6ce14052e80","id":"QR_0ad0d600-8fac-4397-a4ee-d6ce14052e80","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:43:19][354046112719435][5492 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3343 [2025-09-06 18:43:19][354046112719435][5492 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-06 18:43:19][354046112719435][5492 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:43:25][353042532051609][1 ms][INFO] === Request start === [2025-09-06 18:43:25][353042532051609][1 ms][DEBUG] START check_scloud [2025-09-06 18:43:25][353042532051609][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:43:26][353042532051609][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 30254 16311 24179904 173188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:43:26][353042532051609][308 ms][DEBUG] targetPkg: running [2025-09-06 18:43:26][353042532051609][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 18:43:26][353042532051609][308 ms][DEBUG] START check_boot_completed [2025-09-06 18:43:26][353042532051609][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:43:26][353042532051609][353 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 18:43:26][353042532051609][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:43:26][353042532051609][400 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 18:43:26][353042532051609][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:43:26][353042532051609][400 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:43:26][353042532051609][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353042532051609\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1423\"}'\'' -e'"" [2025-09-06 18:43:26][353042532051609][401 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:43:26][353042532051609][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353042532051609\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1423\"}'\'' -e'"" [2025-09-06 18:43:30][353042532051609][5258 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e87c9163-e647-40ae-a1d5-5890a2dbad1d","id":"QR_e87c9163-e647-40ae-a1d5-5890a2dbad1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:43:31][353042532051609][5414 ms][DEBUG] proc_open done in 5013 ms; code=255; res.len=3343 [2025-09-06 18:43:31][353042532051609][5414 ms][DEBUG] END runCmdUntilRes#1 in 5013 ms [2025-09-06 18:43:31][353042532051609][5414 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:43:34][353042532051609][0 ms][INFO] === Request start === [2025-09-06 18:43:34][353042532051609][1 ms][DEBUG] START check_scloud [2025-09-06 18:43:34][353042532051609][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:43:35][353042532051609][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 30254 16311 24292828 185032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:43:35][353042532051609][308 ms][DEBUG] targetPkg: running [2025-09-06 18:43:35][353042532051609][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 18:43:35][353042532051609][308 ms][DEBUG] START check_boot_completed [2025-09-06 18:43:35][353042532051609][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:43:35][353042532051609][353 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 18:43:35][353042532051609][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:43:35][353042532051609][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:43:35][353042532051609][400 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 18:43:35][353042532051609][400 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:43:35][353042532051609][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353042532051609\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8274\"}'\'' -e'"" [2025-09-06 18:43:35][353042532051609][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:43:35][353042532051609][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353042532051609\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8274\"}'\'' -e'"" [2025-09-06 18:43:38][353042532051609][3915 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8d36889-cc39-4aab-81ed-21bc332c4f7f","id":"QR_d8d36889-cc39-4aab-81ed-21bc332c4f7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:43:38][353042532051609][4071 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-09-06 18:43:38][353042532051609][4071 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-09-06 18:43:38][353042532051609][4071 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:46:05][351327611097595][1 ms][INFO] === Request start === [2025-09-06 18:46:05][351327611097595][1 ms][DEBUG] START check_scloud [2025-09-06 18:46:05][351327611097595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:46:05][351327611097595][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 30254 16311 24404600 196328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:46:05][351327611097595][302 ms][DEBUG] targetPkg: running [2025-09-06 18:46:05][351327611097595][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 18:46:05][351327611097595][302 ms][DEBUG] START check_boot_completed [2025-09-06 18:46:05][351327611097595][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:46:05][351327611097595][331 ms][DEBUG] ADB: done in 29 ms; out [2025-09-06 18:46:05][351327611097595][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:46:05][351327611097595][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:46:05][351327611097595][378 ms][DEBUG] END check_boot_completed in 76 ms [2025-09-06 18:46:05][351327611097595][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:46:05][351327611097595][488 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1739\nsuccessfulTxPacketsPerSecond: 0.7072652410678709\nretriedTxPackets: 324\nretriedTxPacketsPerSecond: 0.18262717492362865\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1648\nsuccessfulRxPacketsPerSecond: 0.6076504183822553\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:46:05][351327611097595][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:46:06][351327611097595][1862 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.978/303.978/303.978/0.000 ms\n [2025-09-06 18:46:06][351327611097595][1862 ms][DEBUG] check_internet: online [2025-09-06 18:46:06][351327611097595][1862 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:46:06][351327611097595][1863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351327611097595\",\"model\":\"SM-A256U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4195\"}'\'' -e'"" [2025-09-06 18:46:06][351327611097595][1863 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:46:06][351327611097595][1863 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351327611097595\",\"model\":\"SM-A256U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4195\"}'\'' -e'"" [2025-09-06 18:46:11][351327611097595][6939 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_190eb5d5-f792-4c8d-99a1-e897aca50d42","id":"QR_190eb5d5-f792-4c8d-99a1-e897aca50d42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:46:12][351327611097595][7095 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-09-06 18:46:12][351327611097595][7095 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-09-06 18:46:12][351327611097595][7095 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:46:15][351327611097595][0 ms][INFO] === Request start === [2025-09-06 18:46:15][351327611097595][1 ms][DEBUG] START check_scloud [2025-09-06 18:46:15][351327611097595][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:46:16][351327611097595][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 30254 16311 24528768 208132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:46:16][351327611097595][320 ms][DEBUG] targetPkg: running [2025-09-06 18:46:16][351327611097595][320 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 18:46:16][351327611097595][320 ms][DEBUG] START check_boot_completed [2025-09-06 18:46:16][351327611097595][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:46:16][351327611097595][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:46:16][351327611097595][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:46:16][351327611097595][415 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 18:46:16][351327611097595][415 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 18:46:16][351327611097595][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:46:16][351327611097595][570 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1739\nsuccessfulTxPacketsPerSecond: 0.7072652410678709\nretriedTxPackets: 324\nretriedTxPacketsPerSecond: 0.18262717492362865\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1648\nsuccessfulRxPacketsPerSecond: 0.6076504183822553\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:46:16][351327611097595][571 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:46:16][351327611097595][992 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.924/316.924/316.924/0.000 ms\n [2025-09-06 18:46:16][351327611097595][992 ms][DEBUG] check_internet: online [2025-09-06 18:46:16][351327611097595][992 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:46:16][351327611097595][992 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351327611097595\",\"model\":\"SM-A256U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4411\"}'\'' -e'"" [2025-09-06 18:46:16][351327611097595][992 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:46:16][351327611097595][992 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351327611097595\",\"model\":\"SM-A256U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4411\"}'\'' -e'"" [2025-09-06 18:46:20][351327611097595][4975 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65ccb1de-3863-451d-ba68-55a28bce77cb","id":"QR_65ccb1de-3863-451d-ba68-55a28bce77cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:46:20][351327611097595][5131 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-09-06 18:46:20][351327611097595][5131 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-09-06 18:46:20][351327611097595][5132 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:46:23][353600815480256][0 ms][INFO] === Request start === [2025-09-06 18:46:23][353600815480256][1 ms][DEBUG] START check_scloud [2025-09-06 18:46:23][353600815480256][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:46:24][353600815480256][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 30254 16311 24710152 218516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:46:24][353600815480256][296 ms][DEBUG] targetPkg: running [2025-09-06 18:46:24][353600815480256][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 18:46:24][353600815480256][296 ms][DEBUG] START check_boot_completed [2025-09-06 18:46:24][353600815480256][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:46:24][353600815480256][343 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:46:24][353600815480256][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:46:24][353600815480256][405 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 18:46:24][353600815480256][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 18:46:24][353600815480256][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:46:24][353600815480256][516 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1739\nsuccessfulTxPacketsPerSecond: 0.7072652410678709\nretriedTxPackets: 324\nretriedTxPacketsPerSecond: 0.18262717492362865\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1648\nsuccessfulRxPacketsPerSecond: 0.6076504183822553\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:46:24][353600815480256][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:46:24][353600815480256][968 ms][DEBUG] SU: done in 451 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=321 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 321.533/321.533/321.533/0.000 ms\n [2025-09-06 18:46:24][353600815480256][968 ms][DEBUG] check_internet: online [2025-09-06 18:46:24][353600815480256][968 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:46:24][353600815480256][968 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815480256\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9815\"}'\'' -e'"" [2025-09-06 18:46:24][353600815480256][969 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:46:24][353600815480256][969 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815480256\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9815\"}'\'' -e'"" [2025-09-06 18:46:29][353600815480256][5920 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a43cb195-22d3-4abb-aef7-78b20575db7d","id":"QR_a43cb195-22d3-4abb-aef7-78b20575db7d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:46:30][353600815480256][6076 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-06 18:46:30][353600815480256][6076 ms][DEBUG] END runCmdUntilRes#1 in 5107 ms [2025-09-06 18:46:30][353600815480256][6076 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:46:33][353600815480256][0 ms][INFO] === Request start === [2025-09-06 18:46:33][353600815480256][1 ms][DEBUG] START check_scloud [2025-09-06 18:46:33][353600815480256][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:46:33][353600815480256][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 30254 16311 24880364 230720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:46:33][353600815480256][308 ms][DEBUG] targetPkg: running [2025-09-06 18:46:33][353600815480256][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 18:46:33][353600815480256][308 ms][DEBUG] START check_boot_completed [2025-09-06 18:46:33][353600815480256][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:46:33][353600815480256][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:46:33][353600815480256][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:46:34][353600815480256][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:46:34][353600815480256][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:46:34][353600815480256][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 18:46:34][353600815480256][511 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1739\nsuccessfulTxPacketsPerSecond: 0.7072652410678709\nretriedTxPackets: 324\nretriedTxPacketsPerSecond: 0.18262717492362865\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1648\nsuccessfulRxPacketsPerSecond: 0.6076504183822553\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 18:46:34][353600815480256][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 18:46:34][353600815480256][964 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=309 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 309.150/309.150/309.150/0.000 ms\n [2025-09-06 18:46:34][353600815480256][964 ms][DEBUG] check_internet: online [2025-09-06 18:46:34][353600815480256][964 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:46:34][353600815480256][964 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815480256\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5028\"}'\'' -e'"" [2025-09-06 18:46:34][353600815480256][964 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:46:34][353600815480256][964 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815480256\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5028\"}'\'' -e'"" [2025-09-06 18:46:38][353600815480256][4400 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f5ae36dc-5a89-4e1d-ae62-8738ff75b308","id":"QR_f5ae36dc-5a89-4e1d-ae62-8738ff75b308","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:46:38][353600815480256][4556 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-09-06 18:46:38][353600815480256][4556 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-09-06 18:46:38][353600815480256][4557 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:55:03][357435840542911][0 ms][INFO] === Request start === [2025-09-06 18:55:03][357435840542911][0 ms][DEBUG] START check_scloud [2025-09-06 18:55:03][357435840542911][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:55:04][357435840542911][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 30254 16311 24996060 205808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:55:04][357435840542911][296 ms][DEBUG] targetPkg: running [2025-09-06 18:55:04][357435840542911][296 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 18:55:04][357435840542911][296 ms][DEBUG] START check_boot_completed [2025-09-06 18:55:04][357435840542911][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:55:04][357435840542911][341 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 18:55:04][357435840542911][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:55:04][357435840542911][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:55:04][357435840542911][388 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 18:55:04][357435840542911][388 ms][DEBUG] rawBody.length=1150 [2025-09-06 18:55:04][357435840542911][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840542911\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2955\"}'\'' -e'"" [2025-09-06 18:55:04][357435840542911][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:55:04][357435840542911][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840542911\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2955\"}'\'' -e'"" [2025-09-06 18:55:08][357435840542911][4840 ms][DEBUG] proc_open done in 4452 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 18:55:08][357435840542911][4840 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-09-06 18:55:08][357435840542911][4840 ms][WARN] Detected error: Process with pid 30254 either refused to load frida-agent, or terminated during injectionProcess with pid 30254 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 18:55:08][357435840542911][4840 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 18:55:08][357435840542911][5121 ms][DEBUG] SU: done in 281 ms; outsystem 16544 16311 12773644 241608 ep_poll 0 S system_server\n [2025-09-06 18:55:08][357435840542911][5121 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 18:55:09][357435840542911][5277 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 18:55:09][357435840542911][5278 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 18:55:09][357435840542911][5278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 18:55:09][357435840542911][5402 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 18:55:09][357435840542911][5402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 18:55:09][357435840542911][5559 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 18:55:11][357435840542911][7574 ms][DEBUG] START check_boot_completed [2025-09-06 18:55:11][357435840542911][7574 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:55:11][357435840542911][7621 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 18:55:11][357435840542911][7621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:55:11][357435840542911][7667 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:55:11][357435840542911][7667 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 18:55:14][357435840542911][10682 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 18:55:14][357435840542911][10682 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840542911\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2955\"}'\'' -e'"" [2025-09-06 18:55:18][357435840542911][14634 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4491ee0-96f4-48cf-aeeb-144ece046708","id":"QR_b4491ee0-96f4-48cf-aeeb-144ece046708","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:55:18][357435840542911][14791 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-06 18:55:18][357435840542911][14791 ms][DEBUG] END runCmdUntilRes#2 in 4108 ms [2025-09-06 18:55:18][357435840542911][14791 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 18:55:21][357435840542911][0 ms][INFO] === Request start === [2025-09-06 18:55:21][357435840542911][1 ms][DEBUG] START check_scloud [2025-09-06 18:55:21][357435840542911][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 18:55:21][357435840542911][238 ms][DEBUG] SU: done in 238 ms; outu0_a118 31918 16311 23699552 125404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 18:55:21][357435840542911][239 ms][DEBUG] targetPkg: running [2025-09-06 18:55:21][357435840542911][239 ms][DEBUG] END check_scloud in 238 ms [2025-09-06 18:55:21][357435840542911][239 ms][DEBUG] START check_boot_completed [2025-09-06 18:55:21][357435840542911][239 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 18:55:21][357435840542911][285 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 18:55:21][357435840542911][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 18:55:21][357435840542911][332 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 18:55:21][357435840542911][332 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 18:55:21][357435840542911][332 ms][DEBUG] rawBody.length=1160 [2025-09-06 18:55:21][357435840542911][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840542911\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8795\"}'\'' -e'"" [2025-09-06 18:55:21][357435840542911][332 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 18:55:21][357435840542911][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840542911\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8795\"}'\'' -e'"" [2025-09-06 18:55:26][357435840542911][5049 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c458220b-f6b9-4b7e-8da9-fe827c39f9db","id":"QR_c458220b-f6b9-4b7e-8da9-fe827c39f9db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 18:55:26][357435840542911][5206 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-09-06 18:55:26][357435840542911][5206 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-09-06 18:55:26][357435840542911][5206 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:02:06][352031835194712][1 ms][INFO] === Request start === [2025-09-06 19:02:06][352031835194712][1 ms][DEBUG] START check_scloud [2025-09-06 19:02:06][352031835194712][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:02:06][352031835194712][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 31918 16311 23749772 139996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:02:06][352031835194712][303 ms][DEBUG] targetPkg: running [2025-09-06 19:02:06][352031835194712][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 19:02:06][352031835194712][303 ms][DEBUG] START check_boot_completed [2025-09-06 19:02:06][352031835194712][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:02:06][352031835194712][334 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:02:06][352031835194712][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:02:06][352031835194712][381 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:02:06][352031835194712][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 19:02:06][352031835194712][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:02:06][352031835194712][506 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2179\nsuccessfulTxPacketsPerSecond: 0.15062884260175405\nretriedTxPackets: 423\nretriedTxPacketsPerSecond: 0.005267384862858291\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2032\nsuccessfulRxPacketsPerSecond: 0.14912387549808026\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:02:06][352031835194712][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:02:07][352031835194712][1881 ms][DEBUG] SU: done in 1374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.730/303.730/303.730/0.000 ms\n [2025-09-06 19:02:07][352031835194712][1881 ms][DEBUG] check_internet: online [2025-09-06 19:02:07][352031835194712][1881 ms][DEBUG] rawBody.length=1170 [2025-09-06 19:02:07][352031835194712][1881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352031835194712\",\"model\":\"SM-T510\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ2N9000EDM\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1734\"}'\'' -e'"" [2025-09-06 19:02:07][352031835194712][1881 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:02:07][352031835194712][1881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352031835194712\",\"model\":\"SM-T510\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ2N9000EDM\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1734\"}'\'' -e'"" [2025-09-06 19:02:12][352031835194712][6504 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13f1bd58-b90b-4220-9e56-bd3236ab1ac5","id":"QR_13f1bd58-b90b-4220-9e56-bd3236ab1ac5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:02:12][352031835194712][6661 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-09-06 19:02:12][352031835194712][6661 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-09-06 19:02:12][352031835194712][6661 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:04:03][350331808102557][1 ms][INFO] === Request start === [2025-09-06 19:04:03][350331808102557][1 ms][DEBUG] START check_scloud [2025-09-06 19:04:03][350331808102557][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:04:04][350331808102557][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 31918 16311 23924284 151172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:04:04][350331808102557][308 ms][DEBUG] targetPkg: running [2025-09-06 19:04:04][350331808102557][308 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 19:04:04][350331808102557][308 ms][DEBUG] START check_boot_completed [2025-09-06 19:04:04][350331808102557][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:04:04][350331808102557][354 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 19:04:04][350331808102557][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:04:04][350331808102557][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:04:04][350331808102557][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 19:04:04][350331808102557][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:04:04][350331808102557][511 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2253\nsuccessfulTxPacketsPerSecond: 0.25235130029122704\nretriedTxPackets: 443\nretriedTxPacketsPerSecond: 0.06820305413276406\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2098\nsuccessfulRxPacketsPerSecond: 0.22507007863812142\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:04:04][350331808102557][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:04:04][350331808102557][964 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.968/336.968/336.968/0.000 ms\n [2025-09-06 19:04:04][350331808102557][964 ms][DEBUG] check_internet: online [2025-09-06 19:04:04][350331808102557][964 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:04:04][350331808102557][964 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331808102557\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BKD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7129\"}'\'' -e'"" [2025-09-06 19:04:04][350331808102557][964 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:04:04][350331808102557][964 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331808102557\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BKD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7129\"}'\'' -e'"" [2025-09-06 19:04:09][350331808102557][5572 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c36524d-cba3-4aca-9e55-fe1b0aa9df30","id":"QR_3c36524d-cba3-4aca-9e55-fe1b0aa9df30","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:04:09][350331808102557][5728 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-09-06 19:04:09][350331808102557][5728 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-09-06 19:04:09][350331808102557][5728 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:04:11][350331808102557][0 ms][INFO] === Request start === [2025-09-06 19:04:11][350331808102557][1 ms][DEBUG] START check_scloud [2025-09-06 19:04:11][350331808102557][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:04:12][350331808102557][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 31918 16311 24101508 162836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:04:12][350331808102557][254 ms][DEBUG] targetPkg: running [2025-09-06 19:04:12][350331808102557][254 ms][DEBUG] END check_scloud in 253 ms [2025-09-06 19:04:12][350331808102557][254 ms][DEBUG] START check_boot_completed [2025-09-06 19:04:12][350331808102557][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:04:12][350331808102557][299 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 19:04:12][350331808102557][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:04:12][350331808102557][362 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 19:04:12][350331808102557][362 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 19:04:12][350331808102557][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:04:12][350331808102557][502 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2253\nsuccessfulTxPacketsPerSecond: 0.25235130029122704\nretriedTxPackets: 443\nretriedTxPacketsPerSecond: 0.06820305413276406\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2098\nsuccessfulRxPacketsPerSecond: 0.22507007863812142\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:04:12][350331808102557][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:04:12][350331808102557][940 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.020/302.020/302.020/0.000 ms\n [2025-09-06 19:04:12][350331808102557][940 ms][DEBUG] check_internet: online [2025-09-06 19:04:12][350331808102557][940 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:04:12][350331808102557][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331808102557\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7772\"}'\'' -e'"" [2025-09-06 19:04:12][350331808102557][940 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:04:12][350331808102557][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331808102557\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7772\"}'\'' -e'"" [2025-09-06 19:04:18][350331808102557][6438 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab5445db-9024-468c-aaaf-65feccdb43ea","id":"QR_ab5445db-9024-468c-aaaf-65feccdb43ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:04:18][350331808102557][6594 ms][DEBUG] proc_open done in 5655 ms; code=255; res.len=3343 [2025-09-06 19:04:18][350331808102557][6595 ms][DEBUG] END runCmdUntilRes#1 in 5655 ms [2025-09-06 19:04:18][350331808102557][6595 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:06:04][358443601556921][1 ms][INFO] === Request start === [2025-09-06 19:06:04][358443601556921][1 ms][DEBUG] START check_scloud [2025-09-06 19:06:04][358443601556921][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:06:05][358443601556921][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 31918 16311 24250052 173664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:06:05][358443601556921][310 ms][DEBUG] targetPkg: running [2025-09-06 19:06:05][358443601556921][311 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 19:06:05][358443601556921][311 ms][DEBUG] START check_boot_completed [2025-09-06 19:06:05][358443601556921][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:06:05][358443601556921][357 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:06:05][358443601556921][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:06:05][358443601556921][420 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 19:06:05][358443601556921][420 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 19:06:05][358443601556921][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:06:05][358443601556921][545 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2253\nsuccessfulTxPacketsPerSecond: 0.25235130029122704\nretriedTxPackets: 443\nretriedTxPacketsPerSecond: 0.06820305413276406\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2098\nsuccessfulRxPacketsPerSecond: 0.22507007863812142\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:06:05][358443601556921][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:06:06][358443601556921][1951 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.214/300.214/300.214/0.000 ms\n [2025-09-06 19:06:06][358443601556921][1951 ms][DEBUG] check_internet: online [2025-09-06 19:06:06][358443601556921][1951 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:06:06][358443601556921][1951 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358443601556921\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1160\"}'\'' -e'"" [2025-09-06 19:06:06][358443601556921][1951 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:06:06][358443601556921][1951 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358443601556921\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1160\"}'\'' -e'"" [2025-09-06 19:06:11][358443601556921][6887 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf2566ea-2a6a-452e-9f86-2459a6da26b2","id":"QR_cf2566ea-2a6a-452e-9f86-2459a6da26b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:06:11][358443601556921][7043 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-09-06 19:06:11][358443601556921][7043 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-09-06 19:06:11][358443601556921][7043 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:06:15][358443601556921][0 ms][INFO] === Request start === [2025-09-06 19:06:15][358443601556921][1 ms][DEBUG] START check_scloud [2025-09-06 19:06:15][358443601556921][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:06:15][358443601556921][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 31918 16311 24396620 185400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:06:15][358443601556921][309 ms][DEBUG] targetPkg: running [2025-09-06 19:06:15][358443601556921][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 19:06:15][358443601556921][309 ms][DEBUG] START check_boot_completed [2025-09-06 19:06:15][358443601556921][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:06:15][358443601556921][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:06:15][358443601556921][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:06:15][358443601556921][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:06:15][358443601556921][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 19:06:15][358443601556921][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:06:16][358443601556921][512 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2253\nsuccessfulTxPacketsPerSecond: 0.25235130029122704\nretriedTxPackets: 443\nretriedTxPacketsPerSecond: 0.06820305413276406\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2098\nsuccessfulRxPacketsPerSecond: 0.22507007863812142\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:06:16][358443601556921][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:06:16][358443601556921][918 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=292 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 292.858/292.858/292.858/0.000 ms\n [2025-09-06 19:06:16][358443601556921][918 ms][DEBUG] check_internet: online [2025-09-06 19:06:16][358443601556921][918 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:06:16][358443601556921][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358443601556921\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1352\"}'\'' -e'"" [2025-09-06 19:06:16][358443601556921][918 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:06:16][358443601556921][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358443601556921\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1352\"}'\'' -e'"" [2025-09-06 19:06:20][358443601556921][4792 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc86083f-6a8f-4488-8a87-9c3a66a6414b","id":"QR_fc86083f-6a8f-4488-8a87-9c3a66a6414b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:06:20][358443601556921][4948 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-09-06 19:06:20][358443601556921][4948 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-09-06 19:06:20][358443601556921][4948 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:06:23][350545461521023][0 ms][INFO] === Request start === [2025-09-06 19:06:23][350545461521023][1 ms][DEBUG] START check_scloud [2025-09-06 19:06:23][350545461521023][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:06:23][350545461521023][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 31918 16311 24549460 196316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:06:23][350545461521023][311 ms][DEBUG] targetPkg: running [2025-09-06 19:06:23][350545461521023][311 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 19:06:23][350545461521023][311 ms][DEBUG] START check_boot_completed [2025-09-06 19:06:23][350545461521023][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:06:23][350545461521023][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:06:23][350545461521023][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:06:23][350545461521023][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:06:23][350545461521023][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 19:06:23][350545461521023][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:06:24][350545461521023][498 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2253\nsuccessfulTxPacketsPerSecond: 0.25235130029122704\nretriedTxPackets: 443\nretriedTxPacketsPerSecond: 0.06820305413276406\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2098\nsuccessfulRxPacketsPerSecond: 0.22507007863812142\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:06:24][350545461521023][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:06:24][350545461521023][889 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=297 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 297.664/297.664/297.664/0.000 ms\n [2025-09-06 19:06:24][350545461521023][889 ms][DEBUG] check_internet: online [2025-09-06 19:06:24][350545461521023][889 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:06:24][350545461521023][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461521023\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W601Q18V\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9483\"}'\'' -e'"" [2025-09-06 19:06:24][350545461521023][890 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:06:24][350545461521023][890 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461521023\",\"model\":\"SM-P613\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W601Q18V\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PHE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9483\"}'\'' -e'"" [2025-09-06 19:06:28][350545461521023][4716 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8505bf80-f393-4b80-855b-a65a478941a5","id":"QR_8505bf80-f393-4b80-855b-a65a478941a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:06:28][350545461521023][4872 ms][DEBUG] proc_open done in 3982 ms; code=255; res.len=3343 [2025-09-06 19:06:28][350545461521023][4872 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-09-06 19:06:28][350545461521023][4872 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:09:04][352665187842053][1 ms][INFO] === Request start === [2025-09-06 19:09:04][352665187842053][1 ms][DEBUG] START check_scloud [2025-09-06 19:09:04][352665187842053][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:09:04][352665187842053][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 31918 16311 24648944 107208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:09:04][352665187842053][330 ms][DEBUG] targetPkg: running [2025-09-06 19:09:04][352665187842053][330 ms][DEBUG] END check_scloud in 329 ms [2025-09-06 19:09:04][352665187842053][330 ms][DEBUG] START check_boot_completed [2025-09-06 19:09:04][352665187842053][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:09:04][352665187842053][362 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:09:04][352665187842053][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:09:04][352665187842053][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:09:04][352665187842053][408 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 19:09:04][352665187842053][408 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:09:04][352665187842053][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665187842053\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8559\"}'\'' -e'"" [2025-09-06 19:09:04][352665187842053][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:09:04][352665187842053][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665187842053\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8559\"}'\'' -e'"" [2025-09-06 19:09:09][352665187842053][5704 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02ef8a04-64b2-4e8b-a384-7c6b383ab1ed","id":"QR_02ef8a04-64b2-4e8b-a384-7c6b383ab1ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:09:09][352665187842053][5860 ms][DEBUG] proc_open done in 5452 ms; code=255; res.len=3343 [2025-09-06 19:09:09][352665187842053][5860 ms][DEBUG] END runCmdUntilRes#1 in 5452 ms [2025-09-06 19:09:09][352665187842053][5860 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:09:12][352665187842053][0 ms][INFO] === Request start === [2025-09-06 19:09:12][352665187842053][1 ms][DEBUG] START check_scloud [2025-09-06 19:09:12][352665187842053][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:09:12][352665187842053][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 31918 16311 24779128 113972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:09:12][352665187842053][328 ms][DEBUG] targetPkg: running [2025-09-06 19:09:12][352665187842053][328 ms][DEBUG] END check_scloud in 327 ms [2025-09-06 19:09:12][352665187842053][328 ms][DEBUG] START check_boot_completed [2025-09-06 19:09:12][352665187842053][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:09:12][352665187842053][374 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:09:12][352665187842053][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:09:12][352665187842053][421 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:09:12][352665187842053][421 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 19:09:12][352665187842053][421 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:09:12][352665187842053][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665187842053\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1519\"}'\'' -e'"" [2025-09-06 19:09:12][352665187842053][421 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:09:12][352665187842053][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665187842053\",\"model\":\"SM-A155F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1519\"}'\'' -e'"" [2025-09-06 19:09:17][352665187842053][5436 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dca20eec-ab09-47d2-bda1-c79e3828f47d","id":"QR_dca20eec-ab09-47d2-bda1-c79e3828f47d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:09:17][352665187842053][5592 ms][DEBUG] proc_open done in 5171 ms; code=255; res.len=3343 [2025-09-06 19:09:17][352665187842053][5592 ms][DEBUG] END runCmdUntilRes#1 in 5171 ms [2025-09-06 19:09:17][352665187842053][5592 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:11:04][351477973273670][0 ms][INFO] === Request start === [2025-09-06 19:11:04][351477973273670][1 ms][DEBUG] START check_scloud [2025-09-06 19:11:04][351477973273670][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:11:04][351477973273670][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 31918 16311 24912952 126408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:11:04][351477973273670][310 ms][DEBUG] targetPkg: running [2025-09-06 19:11:04][351477973273670][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 19:11:04][351477973273670][310 ms][DEBUG] START check_boot_completed [2025-09-06 19:11:04][351477973273670][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:11:04][351477973273670][355 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 19:11:04][351477973273670][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:11:04][351477973273670][417 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 19:11:04][351477973273670][417 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 19:11:04][351477973273670][417 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:11:04][351477973273670][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477973273670\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7368\"}'\'' -e'"" [2025-09-06 19:11:04][351477973273670][418 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:11:04][351477973273670][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477973273670\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7368\"}'\'' -e'"" [2025-09-06 19:11:09][351477973273670][5244 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af43738b-1f3a-44ad-8a60-74813500b383","id":"QR_af43738b-1f3a-44ad-8a60-74813500b383","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:11:09][351477973273670][5400 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-09-06 19:11:09][351477973273670][5400 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-09-06 19:11:09][351477973273670][5400 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:11:11][351477973273670][1 ms][INFO] === Request start === [2025-09-06 19:11:11][351477973273670][1 ms][DEBUG] START check_scloud [2025-09-06 19:11:11][351477973273670][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:11:12][351477973273670][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 31918 16311 25076036 136280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:11:12][351477973273670][303 ms][DEBUG] targetPkg: running [2025-09-06 19:11:12][351477973273670][303 ms][DEBUG] END check_scloud in 302 ms [2025-09-06 19:11:12][351477973273670][303 ms][DEBUG] START check_boot_completed [2025-09-06 19:11:12][351477973273670][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:11:12][351477973273670][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:11:12][351477973273670][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:11:12][351477973273670][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:11:12][351477973273670][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 19:11:12][351477973273670][396 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:11:12][351477973273670][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477973273670\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4601\"}'\'' -e'"" [2025-09-06 19:11:12][351477973273670][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:11:12][351477973273670][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477973273670\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4601\"}'\'' -e'"" [2025-09-06 19:11:16][351477973273670][4645 ms][DEBUG] proc_open done in 4249 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 19:11:16][351477973273670][4645 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-06 19:11:16][351477973273670][4645 ms][WARN] Detected error: Process with pid 31918 either refused to load frida-agent, or terminated during injectionProcess with pid 31918 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 19:11:16][351477973273670][4645 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 19:11:16][351477973273670][4926 ms][DEBUG] SU: done in 281 ms; outsystem 16544 16311 12818300 187152 ep_poll 0 S system_server\n [2025-09-06 19:11:16][351477973273670][4926 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 19:11:16][351477973273670][5067 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 19:11:16][351477973273670][5067 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 19:11:16][351477973273670][5067 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 19:11:17][351477973273670][5223 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 19:11:17][351477973273670][5223 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 19:11:17][351477973273670][5520 ms][DEBUG] SU: done in 297 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 19:11:19][351477973273670][7535 ms][DEBUG] START check_boot_completed [2025-09-06 19:11:19][351477973273670][7535 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:11:19][351477973273670][7582 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 19:11:19][351477973273670][7582 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:11:19][351477973273670][7628 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:11:19][351477973273670][7628 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 19:11:22][351477973273670][10643 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 19:11:22][351477973273670][10643 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477973273670\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4601\"}'\'' -e'"" [2025-09-06 19:11:27][351477973273670][15783 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1874c851-1282-4578-992f-65fa6a44db79","id":"QR_1874c851-1282-4578-992f-65fa6a44db79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:11:27][351477973273670][15939 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-09-06 19:11:27][351477973273670][15939 ms][DEBUG] END runCmdUntilRes#2 in 5296 ms [2025-09-06 19:11:27][351477973273670][15939 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:11:33][353684126328982][0 ms][INFO] === Request start === [2025-09-06 19:11:33][353684126328982][1 ms][DEBUG] START check_scloud [2025-09-06 19:11:33][353684126328982][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:11:33][353684126328982][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 3291 16311 23662176 125456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:11:33][353684126328982][260 ms][DEBUG] targetPkg: running [2025-09-06 19:11:33][353684126328982][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-06 19:11:33][353684126328982][260 ms][DEBUG] START check_boot_completed [2025-09-06 19:11:33][353684126328982][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:11:33][353684126328982][291 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:11:33][353684126328982][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:11:33][353684126328982][339 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 19:11:33][353684126328982][339 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 19:11:33][353684126328982][339 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:11:33][353684126328982][339 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684126328982\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3446\"}'\'' -e'"" [2025-09-06 19:11:33][353684126328982][339 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:11:33][353684126328982][339 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684126328982\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3446\"}'\'' -e'"" [2025-09-06 19:11:38][353684126328982][5040 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a3e1f25-5651-4992-aea6-4eff6fc80064","id":"QR_4a3e1f25-5651-4992-aea6-4eff6fc80064","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:11:38][353684126328982][5196 ms][DEBUG] proc_open done in 4857 ms; code=255; res.len=3343 [2025-09-06 19:11:38][353684126328982][5196 ms][DEBUG] END runCmdUntilRes#1 in 4857 ms [2025-09-06 19:11:38][353684126328982][5196 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:11:41][353684126328982][0 ms][INFO] === Request start === [2025-09-06 19:11:41][353684126328982][1 ms][DEBUG] START check_scloud [2025-09-06 19:11:41][353684126328982][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:11:42][353684126328982][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 3291 16311 23827408 139372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:11:42][353684126328982][266 ms][DEBUG] targetPkg: running [2025-09-06 19:11:42][353684126328982][266 ms][DEBUG] END check_scloud in 265 ms [2025-09-06 19:11:42][353684126328982][266 ms][DEBUG] START check_boot_completed [2025-09-06 19:11:42][353684126328982][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:11:42][353684126328982][295 ms][DEBUG] ADB: done in 29 ms; out [2025-09-06 19:11:42][353684126328982][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:11:42][353684126328982][342 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:11:42][353684126328982][343 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 19:11:42][353684126328982][343 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:11:42][353684126328982][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684126328982\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7386\"}'\'' -e'"" [2025-09-06 19:11:42][353684126328982][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:11:42][353684126328982][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684126328982\",\"model\":\"SM-N986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7386\"}'\'' -e'"" [2025-09-06 19:11:45][353684126328982][3763 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a35db2ea-7e5c-4cb5-b95c-fcca35e1b34b","id":"QR_a35db2ea-7e5c-4cb5-b95c-fcca35e1b34b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:11:45][353684126328982][3920 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-06 19:11:45][353684126328982][3920 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-06 19:11:45][353684126328982][3920 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:14:04][353029491300945][1 ms][INFO] === Request start === [2025-09-06 19:14:04][353029491300945][1 ms][DEBUG] START check_scloud [2025-09-06 19:14:04][353029491300945][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:14:05][353029491300945][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 3291 16311 23829104 151192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:14:05][353029491300945][307 ms][DEBUG] targetPkg: running [2025-09-06 19:14:05][353029491300945][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 19:14:05][353029491300945][307 ms][DEBUG] START check_boot_completed [2025-09-06 19:14:05][353029491300945][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:14:05][353029491300945][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:14:05][353029491300945][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:14:05][353029491300945][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:14:05][353029491300945][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 19:14:05][353029491300945][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:14:05][353029491300945][525 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2752\nsuccessfulTxPacketsPerSecond: 1.1601820396128453\nretriedTxPackets: 567\nretriedTxPacketsPerSecond: 0.2692135119543619\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2530\nsuccessfulRxPacketsPerSecond: 1.0127555925902185\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:14:05][353029491300945][526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:14:06][353029491300945][1556 ms][DEBUG] SU: done in 1031 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.621/221.621/221.621/0.000 ms\n [2025-09-06 19:14:06][353029491300945][1557 ms][DEBUG] check_internet: online [2025-09-06 19:14:06][353029491300945][1557 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:14:06][353029491300945][1557 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029491300945\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3818\"}'\'' -e'"" [2025-09-06 19:14:06][353029491300945][1557 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:14:06][353029491300945][1557 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029491300945\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3818\"}'\'' -e'"" [2025-09-06 19:14:11][353029491300945][6758 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_596d82be-4a56-4984-8b72-5d9f24847691","id":"QR_596d82be-4a56-4984-8b72-5d9f24847691","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:14:11][353029491300945][6914 ms][DEBUG] proc_open done in 5357 ms; code=255; res.len=3343 [2025-09-06 19:14:11][353029491300945][6914 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-09-06 19:14:11][353029491300945][6914 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:14:15][353029491300945][0 ms][INFO] === Request start === [2025-09-06 19:14:15][353029491300945][1 ms][DEBUG] START check_scloud [2025-09-06 19:14:15][353029491300945][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:14:15][353029491300945][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 3291 16311 23949112 162124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:14:15][353029491300945][322 ms][DEBUG] targetPkg: running [2025-09-06 19:14:15][353029491300945][322 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 19:14:15][353029491300945][323 ms][DEBUG] START check_boot_completed [2025-09-06 19:14:15][353029491300945][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:14:15][353029491300945][369 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 19:14:15][353029491300945][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:14:15][353029491300945][432 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 19:14:15][353029491300945][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 19:14:15][353029491300945][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:14:15][353029491300945][557 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2752\nsuccessfulTxPacketsPerSecond: 1.1601820396128453\nretriedTxPackets: 567\nretriedTxPacketsPerSecond: 0.2692135119543619\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2530\nsuccessfulRxPacketsPerSecond: 1.0127555925902185\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:14:15][353029491300945][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:14:16][353029491300945][932 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=268 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 268.272/268.272/268.272/0.000 ms\n [2025-09-06 19:14:16][353029491300945][932 ms][DEBUG] check_internet: online [2025-09-06 19:14:16][353029491300945][932 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:14:16][353029491300945][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029491300945\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8733\"}'\'' -e'"" [2025-09-06 19:14:16][353029491300945][932 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:14:16][353029491300945][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029491300945\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8733\"}'\'' -e'"" [2025-09-06 19:14:19][353029491300945][4618 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_411ead0d-251a-40c6-bca2-ba29c3e6521c","id":"QR_411ead0d-251a-40c6-bca2-ba29c3e6521c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:14:20][353029491300945][4774 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-09-06 19:14:20][353029491300945][4774 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-06 19:14:20][353029491300945][4774 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:18:04][355506802169166][1 ms][INFO] === Request start === [2025-09-06 19:18:04][355506802169166][1 ms][DEBUG] START check_scloud [2025-09-06 19:18:04][355506802169166][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:18:04][355506802169166][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 3291 16311 24038392 173064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:18:04][355506802169166][286 ms][DEBUG] targetPkg: running [2025-09-06 19:18:04][355506802169166][286 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 19:18:04][355506802169166][286 ms][DEBUG] START check_boot_completed [2025-09-06 19:18:04][355506802169166][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:18:04][355506802169166][317 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:18:04][355506802169166][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:18:04][355506802169166][380 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 19:18:04][355506802169166][380 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 19:18:04][355506802169166][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:18:04][355506802169166][521 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2888\nsuccessfulTxPacketsPerSecond: 0.45191131904939125\nretriedTxPackets: 616\nretriedTxPacketsPerSecond: 0.1628209899516189\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2639\nsuccessfulRxPacketsPerSecond: 0.3621936307087033\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:18:04][355506802169166][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:18:05][355506802169166][1895 ms][DEBUG] SU: done in 1375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.715/300.715/300.715/0.000 ms\n [2025-09-06 19:18:05][355506802169166][1895 ms][DEBUG] check_internet: online [2025-09-06 19:18:05][355506802169166][1895 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:18:05][355506802169166][1896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802169166\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4725\"}'\'' -e'"" [2025-09-06 19:18:05][355506802169166][1896 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:18:05][355506802169166][1896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802169166\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4725\"}'\'' -e'"" [2025-09-06 19:18:09][355506802169166][5754 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f7b9c43-e62e-4c79-8ff4-e479befe5eff","id":"QR_2f7b9c43-e62e-4c79-8ff4-e479befe5eff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:18:09][355506802169166][5910 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-09-06 19:18:09][355506802169166][5910 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-09-06 19:18:09][355506802169166][5910 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:18:12][355506802169166][1 ms][INFO] === Request start === [2025-09-06 19:18:12][355506802169166][1 ms][DEBUG] START check_scloud [2025-09-06 19:18:12][355506802169166][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:18:12][355506802169166][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 3291 16311 24172480 184532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:18:12][355506802169166][282 ms][DEBUG] targetPkg: running [2025-09-06 19:18:12][355506802169166][283 ms][DEBUG] END check_scloud in 282 ms [2025-09-06 19:18:12][355506802169166][283 ms][DEBUG] START check_boot_completed [2025-09-06 19:18:12][355506802169166][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:18:12][355506802169166][328 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 19:18:12][355506802169166][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:18:12][355506802169166][390 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 19:18:12][355506802169166][390 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 19:18:12][355506802169166][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:18:12][355506802169166][531 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2888\nsuccessfulTxPacketsPerSecond: 0.45191131904939125\nretriedTxPackets: 616\nretriedTxPacketsPerSecond: 0.1628209899516189\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2639\nsuccessfulRxPacketsPerSecond: 0.3621936307087033\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:18:12][355506802169166][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:18:13][355506802169166][906 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.959/226.959/226.959/0.000 ms\n [2025-09-06 19:18:13][355506802169166][906 ms][DEBUG] check_internet: online [2025-09-06 19:18:13][355506802169166][906 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:18:13][355506802169166][906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802169166\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5044\"}'\'' -e'"" [2025-09-06 19:18:13][355506802169166][906 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:18:13][355506802169166][906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802169166\",\"model\":\"SM-A245F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5044\"}'\'' -e'"" [2025-09-06 19:18:18][355506802169166][5858 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12e6c575-fc4c-4bd4-9522-c64a14457f25","id":"QR_12e6c575-fc4c-4bd4-9522-c64a14457f25","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:18:18][355506802169166][6014 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 19:18:18][355506802169166][6014 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 19:18:18][355506802169166][6014 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:19:04][351646932636397][0 ms][INFO] === Request start === [2025-09-06 19:19:04][351646932636397][1 ms][DEBUG] START check_scloud [2025-09-06 19:19:04][351646932636397][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:19:05][351646932636397][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 3291 16311 24278144 195740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:19:05][351646932636397][294 ms][DEBUG] targetPkg: running [2025-09-06 19:19:05][351646932636397][294 ms][DEBUG] END check_scloud in 293 ms [2025-09-06 19:19:05][351646932636397][294 ms][DEBUG] START check_boot_completed [2025-09-06 19:19:05][351646932636397][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:19:05][351646932636397][341 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 19:19:05][351646932636397][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:19:05][351646932636397][435 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 19:19:05][351646932636397][435 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 19:19:05][351646932636397][435 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:19:05][351646932636397][435 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351646932636397\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7769\"}'\'' -e'"" [2025-09-06 19:19:05][351646932636397][435 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:19:05][351646932636397][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351646932636397\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7769\"}'\'' -e'"" [2025-09-06 19:19:10][351646932636397][5246 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78050a6b-d939-4e12-b816-0ea6e27b3b62","id":"QR_78050a6b-d939-4e12-b816-0ea6e27b3b62","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:19:10][351646932636397][5402 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-06 19:19:10][351646932636397][5402 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-09-06 19:19:10][351646932636397][5402 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:19:13][351646932636397][0 ms][INFO] === Request start === [2025-09-06 19:19:13][351646932636397][1 ms][DEBUG] START check_scloud [2025-09-06 19:19:13][351646932636397][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:19:14][351646932636397][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 3291 16311 24420616 207712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:19:14][351646932636397][291 ms][DEBUG] targetPkg: running [2025-09-06 19:19:14][351646932636397][291 ms][DEBUG] END check_scloud in 290 ms [2025-09-06 19:19:14][351646932636397][291 ms][DEBUG] START check_boot_completed [2025-09-06 19:19:14][351646932636397][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:19:14][351646932636397][322 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:19:14][351646932636397][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:19:14][351646932636397][385 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 19:19:14][351646932636397][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 19:19:14][351646932636397][385 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:19:14][351646932636397][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351646932636397\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7700\"}'\'' -e'"" [2025-09-06 19:19:14][351646932636397][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:19:14][351646932636397][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351646932636397\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7700\"}'\'' -e'"" [2025-09-06 19:19:19][351646932636397][5227 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5bf05805-1c94-48e5-9b1f-c1f9bbf34e54","id":"QR_5bf05805-1c94-48e5-9b1f-c1f9bbf34e54","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:19:19][351646932636397][5384 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-09-06 19:19:19][351646932636397][5384 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-09-06 19:19:19][351646932636397][5384 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:22:03][353773291298581][1 ms][INFO] === Request start === [2025-09-06 19:22:03][353773291298581][1 ms][DEBUG] START check_scloud [2025-09-06 19:22:03][353773291298581][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:22:04][353773291298581][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 3291 16311 24556872 218560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:22:04][353773291298581][301 ms][DEBUG] targetPkg: running [2025-09-06 19:22:04][353773291298581][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-06 19:22:04][353773291298581][301 ms][DEBUG] START check_boot_completed [2025-09-06 19:22:04][353773291298581][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:22:04][353773291298581][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:22:04][353773291298581][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:22:04][353773291298581][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:22:04][353773291298581][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 19:22:04][353773291298581][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:22:04][353773291298581][488 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3007\nsuccessfulTxPacketsPerSecond: 0.39514929338008714\nretriedTxPackets: 655\nretriedTxPacketsPerSecond: 0.1295027095951546\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2742\nsuccessfulRxPacketsPerSecond: 0.34201997662310063\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:22:04][353773291298581][488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:22:05][353773291298581][1847 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.108/305.108/305.108/0.000 ms\n [2025-09-06 19:22:05][353773291298581][1847 ms][DEBUG] check_internet: online [2025-09-06 19:22:05][353773291298581][1847 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:22:05][353773291298581][1848 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353773291298581\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8066\"}'\'' -e'"" [2025-09-06 19:22:05][353773291298581][1848 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:22:05][353773291298581][1848 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353773291298581\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8066\"}'\'' -e'"" [2025-09-06 19:22:09][353773291298581][5611 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c43e2565-994c-4f5a-b48a-74d9be8fe8bb","id":"QR_c43e2565-994c-4f5a-b48a-74d9be8fe8bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:22:09][353773291298581][5768 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-06 19:22:09][353773291298581][5768 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-06 19:22:09][353773291298581][5768 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:22:12][353773291298581][0 ms][INFO] === Request start === [2025-09-06 19:22:12][353773291298581][1 ms][DEBUG] START check_scloud [2025-09-06 19:22:12][353773291298581][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:22:12][353773291298581][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 3291 16311 24723984 230296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:22:12][353773291298581][314 ms][DEBUG] targetPkg: running [2025-09-06 19:22:12][353773291298581][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 19:22:12][353773291298581][314 ms][DEBUG] START check_boot_completed [2025-09-06 19:22:12][353773291298581][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:22:12][353773291298581][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:22:12][353773291298581][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:22:12][353773291298581][423 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 19:22:12][353773291298581][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 19:22:12][353773291298581][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:22:12][353773291298581][532 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3007\nsuccessfulTxPacketsPerSecond: 0.39514929338008714\nretriedTxPackets: 655\nretriedTxPacketsPerSecond: 0.1295027095951546\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2742\nsuccessfulRxPacketsPerSecond: 0.34201997662310063\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:22:12][353773291298581][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:22:12][353773291298581][876 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.054/227.054/227.054/0.000 ms\n [2025-09-06 19:22:12][353773291298581][876 ms][DEBUG] check_internet: online [2025-09-06 19:22:12][353773291298581][876 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:22:12][353773291298581][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353773291298581\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9592\"}'\'' -e'"" [2025-09-06 19:22:12][353773291298581][876 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:22:12][353773291298581][876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353773291298581\",\"model\":\"SM-G780F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9592\"}'\'' -e'"" [2025-09-06 19:22:18][353773291298581][6297 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29afe472-4211-48a6-8450-ec758742e2f0","id":"QR_29afe472-4211-48a6-8450-ec758742e2f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:22:18][353773291298581][6453 ms][DEBUG] proc_open done in 5577 ms; code=255; res.len=3343 [2025-09-06 19:22:18][353773291298581][6453 ms][DEBUG] END runCmdUntilRes#1 in 5577 ms [2025-09-06 19:22:18][353773291298581][6453 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:23:05][352271523381599][0 ms][INFO] === Request start === [2025-09-06 19:23:05][352271523381599][1 ms][DEBUG] START check_scloud [2025-09-06 19:23:05][352271523381599][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:23:05][352271523381599][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 3291 16311 24821460 240992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:23:05][352271523381599][320 ms][DEBUG] targetPkg: running [2025-09-06 19:23:05][352271523381599][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 19:23:05][352271523381599][320 ms][DEBUG] START check_boot_completed [2025-09-06 19:23:05][352271523381599][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:23:05][352271523381599][367 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:23:05][352271523381599][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:23:05][352271523381599][413 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:23:05][352271523381599][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 19:23:05][352271523381599][413 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:23:05][352271523381599][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352271523381599\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4905\"}'\'' -e'"" [2025-09-06 19:23:05][352271523381599][413 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:23:05][352271523381599][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352271523381599\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4905\"}'\'' -e'"" [2025-09-06 19:23:09][352271523381599][4366 ms][DEBUG] proc_open done in 3952 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 19:23:09][352271523381599][4366 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-06 19:23:09][352271523381599][4366 ms][WARN] Detected error: Process with pid 3291 either refused to load frida-agent, or terminated during injectionProcess with pid 3291 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 19:23:09][352271523381599][4366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 19:23:09][352271523381599][4647 ms][DEBUG] SU: done in 281 ms; outsystem 16544 16311 12802368 182728 ep_poll 0 S system_server\n [2025-09-06 19:23:09][352271523381599][4647 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 19:23:09][352271523381599][4788 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 19:23:09][352271523381599][4788 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 19:23:09][352271523381599][4788 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 19:23:10][352271523381599][4944 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 19:23:10][352271523381599][4944 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 19:23:10][352271523381599][5084 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 19:23:12][352271523381599][7099 ms][DEBUG] START check_boot_completed [2025-09-06 19:23:12][352271523381599][7099 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:23:12][352271523381599][7146 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 19:23:12][352271523381599][7146 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:23:12][352271523381599][7193 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:23:12][352271523381599][7193 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 19:23:15][352271523381599][10208 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 19:23:15][352271523381599][10208 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352271523381599\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"BST\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4905\"}'\'' -e'"" [2025-09-06 19:23:21][352271523381599][15972 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2aae1efd-bf70-4ecb-88cc-8052785af46b","id":"QR_2aae1efd-bf70-4ecb-88cc-8052785af46b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:23:21][352271523381599][16128 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-09-06 19:23:21][352271523381599][16129 ms][DEBUG] END runCmdUntilRes#2 in 5921 ms [2025-09-06 19:23:21][352271523381599][16129 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:23:24][352271523381599][1 ms][INFO] === Request start === [2025-09-06 19:23:24][352271523381599][1 ms][DEBUG] START check_scloud [2025-09-06 19:23:24][352271523381599][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:23:25][352271523381599][246 ms][DEBUG] SU: done in 246 ms; outu0_a118 5048 16311 23762652 125352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:23:25][352271523381599][247 ms][DEBUG] targetPkg: running [2025-09-06 19:23:25][352271523381599][247 ms][DEBUG] END check_scloud in 246 ms [2025-09-06 19:23:25][352271523381599][247 ms][DEBUG] START check_boot_completed [2025-09-06 19:23:25][352271523381599][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:23:25][352271523381599][293 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:23:25][352271523381599][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:23:25][352271523381599][341 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 19:23:25][352271523381599][341 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 19:23:25][352271523381599][341 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:23:25][352271523381599][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352271523381599\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5790\"}'\'' -e'"" [2025-09-06 19:23:25][352271523381599][341 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:23:25][352271523381599][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352271523381599\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5790\"}'\'' -e'"" [2025-09-06 19:23:28][352271523381599][4136 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbb8ae29-7d26-4001-93b4-ac34fec6428f","id":"QR_bbb8ae29-7d26-4001-93b4-ac34fec6428f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:23:29][352271523381599][4292 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-09-06 19:23:29][352271523381599][4292 ms][DEBUG] END runCmdUntilRes#1 in 3951 ms [2025-09-06 19:23:29][352271523381599][4292 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:24:03][357967970799812][0 ms][INFO] === Request start === [2025-09-06 19:24:03][357967970799812][1 ms][DEBUG] START check_scloud [2025-09-06 19:24:03][357967970799812][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:24:03][357967970799812][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 5048 16311 23846396 139916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:24:03][357967970799812][314 ms][DEBUG] targetPkg: running [2025-09-06 19:24:03][357967970799812][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 19:24:03][357967970799812][314 ms][DEBUG] START check_boot_completed [2025-09-06 19:24:03][357967970799812][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:24:03][357967970799812][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:24:03][357967970799812][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:24:03][357967970799812][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:24:03][357967970799812][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 19:24:03][357967970799812][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:24:03][357967970799812][517 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3007\nsuccessfulTxPacketsPerSecond: 0.39514929338008714\nretriedTxPackets: 655\nretriedTxPacketsPerSecond: 0.1295027095951546\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2742\nsuccessfulRxPacketsPerSecond: 0.34201997662310063\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:24:03][357967970799812][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:24:04][357967970799812][907 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.529/251.529/251.529/0.000 ms\n [2025-09-06 19:24:04][357967970799812][908 ms][DEBUG] check_internet: online [2025-09-06 19:24:04][357967970799812][908 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:24:04][357967970799812][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970799812\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5886\"}'\'' -e'"" [2025-09-06 19:24:04][357967970799812][908 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:24:04][357967970799812][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970799812\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5886\"}'\'' -e'"" [2025-09-06 19:24:07][357967970799812][4328 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0903727-be9a-48ea-824f-7838665cade0","id":"QR_b0903727-be9a-48ea-824f-7838665cade0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:24:07][357967970799812][4485 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-09-06 19:24:07][357967970799812][4485 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-09-06 19:24:07][357967970799812][4485 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:24:09][357967970799812][1 ms][INFO] === Request start === [2025-09-06 19:24:09][357967970799812][1 ms][DEBUG] START check_scloud [2025-09-06 19:24:09][357967970799812][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:24:10][357967970799812][240 ms][DEBUG] SU: done in 238 ms; outu0_a118 5048 16311 23978564 151388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:24:10][357967970799812][240 ms][DEBUG] targetPkg: running [2025-09-06 19:24:10][357967970799812][240 ms][DEBUG] END check_scloud in 239 ms [2025-09-06 19:24:10][357967970799812][240 ms][DEBUG] START check_boot_completed [2025-09-06 19:24:10][357967970799812][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:24:10][357967970799812][271 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:24:10][357967970799812][271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:24:10][357967970799812][318 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:24:10][357967970799812][318 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 19:24:10][357967970799812][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:24:10][357967970799812][427 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3007\nsuccessfulTxPacketsPerSecond: 0.39514929338008714\nretriedTxPackets: 655\nretriedTxPacketsPerSecond: 0.1295027095951546\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2742\nsuccessfulRxPacketsPerSecond: 0.34201997662310063\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:24:10][357967970799812][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:24:10][357967970799812][787 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.398/226.398/226.398/0.000 ms\n [2025-09-06 19:24:10][357967970799812][787 ms][DEBUG] check_internet: online [2025-09-06 19:24:10][357967970799812][787 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:24:10][357967970799812][787 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970799812\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5611\"}'\'' -e'"" [2025-09-06 19:24:10][357967970799812][787 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:24:10][357967970799812][787 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970799812\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5611\"}'\'' -e'"" [2025-09-06 19:24:15][357967970799812][5816 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d13fdf45-2b37-4866-a8c9-7a4b329eb131","id":"QR_d13fdf45-2b37-4866-a8c9-7a4b329eb131","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:24:15][357967970799812][5973 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-06 19:24:15][357967970799812][5973 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-06 19:24:15][357967970799812][5973 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:25:04][355720108017520][0 ms][INFO] === Request start === [2025-09-06 19:25:04][355720108017520][1 ms][DEBUG] START check_scloud [2025-09-06 19:25:04][355720108017520][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:25:04][355720108017520][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 5048 16311 24110936 161672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:25:04][355720108017520][315 ms][DEBUG] targetPkg: running [2025-09-06 19:25:04][355720108017520][315 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 19:25:04][355720108017520][315 ms][DEBUG] START check_boot_completed [2025-09-06 19:25:04][355720108017520][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:25:05][355720108017520][346 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:25:05][355720108017520][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:25:05][355720108017520][395 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 19:25:05][355720108017520][395 ms][DEBUG] END check_boot_completed in 80 ms [2025-09-06 19:25:05][355720108017520][395 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:25:05][355720108017520][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355720108017520\",\"model\":\"SM-A205U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8330\"}'\'' -e'"" [2025-09-06 19:25:05][355720108017520][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:25:05][355720108017520][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355720108017520\",\"model\":\"SM-A205U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TMK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8330\"}'\'' -e'"" [2025-09-06 19:25:10][355720108017520][5923 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa93b3c3-beef-437f-b35e-4cbafea2d508","id":"QR_fa93b3c3-beef-437f-b35e-4cbafea2d508","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:25:10][355720108017520][6079 ms][DEBUG] proc_open done in 5684 ms; code=255; res.len=3343 [2025-09-06 19:25:10][355720108017520][6079 ms][DEBUG] END runCmdUntilRes#1 in 5684 ms [2025-09-06 19:25:10][355720108017520][6079 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:25:14][355720108017520][0 ms][INFO] === Request start === [2025-09-06 19:25:14][355720108017520][1 ms][DEBUG] START check_scloud [2025-09-06 19:25:14][355720108017520][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:25:14][355720108017520][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 5048 16311 24252372 172704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:25:14][355720108017520][305 ms][DEBUG] targetPkg: running [2025-09-06 19:25:14][355720108017520][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 19:25:14][355720108017520][305 ms][DEBUG] START check_boot_completed [2025-09-06 19:25:14][355720108017520][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:25:14][355720108017520][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:25:14][355720108017520][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:25:14][355720108017520][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:25:14][355720108017520][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 19:25:14][355720108017520][399 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:25:14][355720108017520][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355720108017520\",\"model\":\"SM-A205U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMK\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2326\"}'\'' -e'"" [2025-09-06 19:25:14][355720108017520][399 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:25:14][355720108017520][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355720108017520\",\"model\":\"SM-A205U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TMK\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2326\"}'\'' -e'"" [2025-09-06 19:25:18][355720108017520][4351 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb33bd3d-4067-4762-ac5d-ccb87a6d1276","id":"QR_cb33bd3d-4067-4762-ac5d-ccb87a6d1276","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:25:18][355720108017520][4507 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-09-06 19:25:18][355720108017520][4507 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-09-06 19:25:18][355720108017520][4507 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:27:03][357712351490619][1 ms][INFO] === Request start === [2025-09-06 19:27:03][357712351490619][1 ms][DEBUG] START check_scloud [2025-09-06 19:27:03][357712351490619][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:27:04][357712351490619][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 5048 16311 24349716 184816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:27:04][357712351490619][300 ms][DEBUG] targetPkg: running [2025-09-06 19:27:04][357712351490619][300 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 19:27:04][357712351490619][300 ms][DEBUG] START check_boot_completed [2025-09-06 19:27:04][357712351490619][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:27:04][357712351490619][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:27:04][357712351490619][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:27:04][357712351490619][409 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 19:27:04][357712351490619][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 19:27:04][357712351490619][409 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:27:04][357712351490619][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351490619\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6410\"}'\'' -e'"" [2025-09-06 19:27:04][357712351490619][409 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:27:04][357712351490619][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351490619\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6410\"}'\'' -e'"" [2025-09-06 19:27:08][357712351490619][5142 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45907205-1515-461c-9263-db9d4ebb021a","id":"QR_45907205-1515-461c-9263-db9d4ebb021a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:27:09][357712351490619][5298 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-09-06 19:27:09][357712351490619][5298 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-09-06 19:27:09][357712351490619][5298 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:27:11][357712351490619][0 ms][INFO] === Request start === [2025-09-06 19:27:11][357712351490619][1 ms][DEBUG] START check_scloud [2025-09-06 19:27:11][357712351490619][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:27:11][357712351490619][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 5048 16311 24492188 195756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:27:11][357712351490619][285 ms][DEBUG] targetPkg: running [2025-09-06 19:27:11][357712351490619][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 19:27:11][357712351490619][285 ms][DEBUG] START check_boot_completed [2025-09-06 19:27:11][357712351490619][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:27:11][357712351490619][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:27:11][357712351490619][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:27:11][357712351490619][394 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 19:27:11][357712351490619][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 19:27:11][357712351490619][395 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:27:11][357712351490619][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351490619\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2005\"}'\'' -e'"" [2025-09-06 19:27:11][357712351490619][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:27:11][357712351490619][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351490619\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2005\"}'\'' -e'"" [2025-09-06 19:27:16][357712351490619][5487 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2be5d25-8abc-474b-bb1e-51d231405821","id":"QR_b2be5d25-8abc-474b-bb1e-51d231405821","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:27:17][357712351490619][5643 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-09-06 19:27:17][357712351490619][5643 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-09-06 19:27:17][357712351490619][5643 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:28:03][352677530099976][0 ms][INFO] === Request start === [2025-09-06 19:28:03][352677530099976][1 ms][DEBUG] START check_scloud [2025-09-06 19:28:03][352677530099976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:28:03][352677530099976][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 5048 16311 24628444 207516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:28:03][352677530099976][307 ms][DEBUG] targetPkg: running [2025-09-06 19:28:03][352677530099976][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 19:28:03][352677530099976][307 ms][DEBUG] START check_boot_completed [2025-09-06 19:28:03][352677530099976][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:28:03][352677530099976][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:28:03][352677530099976][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:28:04][352677530099976][402 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 19:28:04][352677530099976][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 19:28:04][352677530099976][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:28:04][352677530099976][557 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3304\nsuccessfulTxPacketsPerSecond: 0.6702637487851469\nretriedTxPackets: 743\nretriedTxPacketsPerSecond: 0.19270082777572975\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2993\nsuccessfulRxPacketsPerSecond: 0.5697241864673749\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:28:04][352677530099976][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:28:05][352677530099976][1933 ms][DEBUG] SU: done in 1376 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.329/300.329/300.329/0.000 ms\n [2025-09-06 19:28:05][352677530099976][1933 ms][DEBUG] check_internet: online [2025-09-06 19:28:05][352677530099976][1933 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:28:05][352677530099976][1933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530099976\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8558\"}'\'' -e'"" [2025-09-06 19:28:05][352677530099976][1934 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:28:05][352677530099976][1934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530099976\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8558\"}'\'' -e'"" [2025-09-06 19:28:09][352677530099976][5821 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30bc9f0c-3b05-4e8d-a94b-8bb851a0560d","id":"QR_30bc9f0c-3b05-4e8d-a94b-8bb851a0560d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:28:09][352677530099976][5977 ms][DEBUG] proc_open done in 4043 ms; code=255; res.len=3343 [2025-09-06 19:28:09][352677530099976][5977 ms][DEBUG] END runCmdUntilRes#1 in 4044 ms [2025-09-06 19:28:09][352677530099976][5977 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:28:11][352677530099976][0 ms][INFO] === Request start === [2025-09-06 19:28:11][352677530099976][1 ms][DEBUG] START check_scloud [2025-09-06 19:28:11][352677530099976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:28:12][352677530099976][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 5048 16311 24797540 218104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:28:12][352677530099976][307 ms][DEBUG] targetPkg: running [2025-09-06 19:28:12][352677530099976][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 19:28:12][352677530099976][307 ms][DEBUG] START check_boot_completed [2025-09-06 19:28:12][352677530099976][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:28:12][352677530099976][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:28:12][352677530099976][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:28:12][352677530099976][416 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 19:28:12][352677530099976][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 19:28:12][352677530099976][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:28:12][352677530099976][572 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3304\nsuccessfulTxPacketsPerSecond: 0.6702637487851469\nretriedTxPackets: 743\nretriedTxPacketsPerSecond: 0.19270082777572975\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2993\nsuccessfulRxPacketsPerSecond: 0.5697241864673749\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:28:12][352677530099976][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:28:12][352677530099976][995 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=326 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 326.794/326.794/326.794/0.000 ms\n [2025-09-06 19:28:12][352677530099976][995 ms][DEBUG] check_internet: online [2025-09-06 19:28:12][352677530099976][995 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:28:12][352677530099976][995 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530099976\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2116\"}'\'' -e'"" [2025-09-06 19:28:12][352677530099976][995 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:28:12][352677530099976][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530099976\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2116\"}'\'' -e'"" [2025-09-06 19:28:17][352677530099976][6055 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2120342-5cfc-40db-bf93-26e45b3cb688","id":"QR_c2120342-5cfc-40db-bf93-26e45b3cb688","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:28:18][352677530099976][6211 ms][DEBUG] proc_open done in 5216 ms; code=255; res.len=3343 [2025-09-06 19:28:18][352677530099976][6211 ms][DEBUG] END runCmdUntilRes#1 in 5216 ms [2025-09-06 19:28:18][352677530099976][6211 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:29:03][358423441087204][0 ms][INFO] === Request start === [2025-09-06 19:29:03][358423441087204][1 ms][DEBUG] START check_scloud [2025-09-06 19:29:03][358423441087204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:29:03][358423441087204][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 5048 16311 24944164 230428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:29:03][358423441087204][311 ms][DEBUG] targetPkg: running [2025-09-06 19:29:03][358423441087204][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 19:29:03][358423441087204][311 ms][DEBUG] START check_boot_completed [2025-09-06 19:29:03][358423441087204][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:29:03][358423441087204][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:29:03][358423441087204][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:29:03][358423441087204][389 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 19:29:03][358423441087204][389 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 19:29:03][358423441087204][390 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:29:03][358423441087204][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358423441087204\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4805\"}'\'' -e'"" [2025-09-06 19:29:03][358423441087204][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:29:03][358423441087204][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358423441087204\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4805\"}'\'' -e'"" [2025-09-06 19:29:07][358423441087204][3950 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89200cc6-486b-4d03-b3a8-bf473b0ff6cc","id":"QR_89200cc6-486b-4d03-b3a8-bf473b0ff6cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:29:07][358423441087204][4106 ms][DEBUG] proc_open done in 3716 ms; code=255; res.len=3343 [2025-09-06 19:29:07][358423441087204][4106 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-09-06 19:29:07][358423441087204][4106 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:29:10][358423441087204][1 ms][INFO] === Request start === [2025-09-06 19:29:10][358423441087204][1 ms][DEBUG] START check_scloud [2025-09-06 19:29:10][358423441087204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:29:10][358423441087204][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 5048 16311 25097004 241348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:29:10][358423441087204][248 ms][DEBUG] targetPkg: running [2025-09-06 19:29:10][358423441087204][248 ms][DEBUG] END check_scloud in 247 ms [2025-09-06 19:29:10][358423441087204][248 ms][DEBUG] START check_boot_completed [2025-09-06 19:29:10][358423441087204][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:29:10][358423441087204][294 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:29:10][358423441087204][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:29:10][358423441087204][341 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:29:10][358423441087204][341 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 19:29:10][358423441087204][341 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:29:10][358423441087204][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358423441087204\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3944\"}'\'' -e'"" [2025-09-06 19:29:10][358423441087204][341 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:29:10][358423441087204][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358423441087204\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3944\"}'\'' -e'"" [2025-09-06 19:29:14][358423441087204][4106 ms][DEBUG] proc_open done in 3765 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 19:29:14][358423441087204][4106 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-09-06 19:29:14][358423441087204][4106 ms][WARN] Detected error: Process with pid 5048 either refused to load frida-agent, or terminated during injectionProcess with pid 5048 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 19:29:14][358423441087204][4106 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 19:29:14][358423441087204][4372 ms][DEBUG] SU: done in 266 ms; outsystem 16544 16311 12796520 184064 ep_poll 0 S system_server\n [2025-09-06 19:29:14][358423441087204][4372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 19:29:14][358423441087204][4528 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 19:29:14][358423441087204][4528 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 19:29:14][358423441087204][4528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 19:29:14][358423441087204][4684 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 19:29:14][358423441087204][4684 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 19:29:14][358423441087204][4871 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 19:29:16][358423441087204][6886 ms][DEBUG] START check_boot_completed [2025-09-06 19:29:16][358423441087204][6886 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:29:17][358423441087204][6933 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 19:29:17][358423441087204][6933 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:29:17][358423441087204][6981 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:29:17][358423441087204][6981 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 19:29:20][358423441087204][9995 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 19:29:20][358423441087204][9995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358423441087204\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3944\"}'\'' -e'"" [2025-09-06 19:29:25][358423441087204][15791 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06e09622-f1db-41ba-95c2-d85494816a17","id":"QR_06e09622-f1db-41ba-95c2-d85494816a17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:29:26][358423441087204][15947 ms][DEBUG] proc_open done in 5952 ms; code=255; res.len=3343 [2025-09-06 19:29:26][358423441087204][15947 ms][DEBUG] END runCmdUntilRes#2 in 5952 ms [2025-09-06 19:29:26][358423441087204][15947 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:30:03][352469859958424][0 ms][INFO] === Request start === [2025-09-06 19:30:03][352469859958424][1 ms][DEBUG] START check_scloud [2025-09-06 19:30:03][352469859958424][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:30:04][352469859958424][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 6838 16311 23664984 126976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:30:04][352469859958424][310 ms][DEBUG] targetPkg: running [2025-09-06 19:30:04][352469859958424][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 19:30:04][352469859958424][310 ms][DEBUG] START check_boot_completed [2025-09-06 19:30:04][352469859958424][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:30:04][352469859958424][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:30:04][352469859958424][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:30:04][352469859958424][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:30:04][352469859958424][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 19:30:04][352469859958424][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:30:04][352469859958424][499 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3304\nsuccessfulTxPacketsPerSecond: 0.6702637487851469\nretriedTxPackets: 743\nretriedTxPacketsPerSecond: 0.19270082777572975\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2993\nsuccessfulRxPacketsPerSecond: 0.5697241864673749\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:30:04][352469859958424][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:30:04][352469859958424][857 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.877/259.877/259.877/0.000 ms\n [2025-09-06 19:30:04][352469859958424][857 ms][DEBUG] check_internet: online [2025-09-06 19:30:04][352469859958424][857 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:30:04][352469859958424][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859958424\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2438\"}'\'' -e'"" [2025-09-06 19:30:04][352469859958424][857 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:30:04][352469859958424][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859958424\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2438\"}'\'' -e'"" [2025-09-06 19:30:08][352469859958424][4950 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 19:30:09][352469859958424][5106 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=115 [2025-09-06 19:30:09][352469859958424][5106 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-06 19:30:09][352469859958424][5106 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 19:30:09][][0 ms][INFO] === Request start === [2025-09-06 19:30:09][][1 ms][DEBUG] START check_scloud [2025-09-06 19:30:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:30:09][][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 6838 16311 23803232 137680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:30:09][][316 ms][DEBUG] targetPkg: running [2025-09-06 19:30:09][][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 19:30:09][][316 ms][DEBUG] START check_boot_completed [2025-09-06 19:30:09][][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:30:09][][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:30:09][][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:30:09][][425 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 19:30:09][][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 19:30:09][][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:30:09][][534 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3304\nsuccessfulTxPacketsPerSecond: 0.6702637487851469\nretriedTxPackets: 743\nretriedTxPacketsPerSecond: 0.19270082777572975\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2993\nsuccessfulRxPacketsPerSecond: 0.5697241864673749\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:30:09][][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:30:10][][878 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.863/231.863/231.863/0.000 ms\n [2025-09-06 19:30:10][][878 ms][DEBUG] check_internet: online [2025-09-06 19:30:10][][878 ms][DEBUG] rawBody.length=1131 [2025-09-06 19:30:10][][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T80SPHKB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4723\"}'\'' -e'"" [2025-09-06 19:30:10][][878 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:30:10][][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T80SPHKB\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4723\"}'\'' -e'"" [2025-09-06 19:30:13][][4127 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-06 19:30:13][][4283 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=95 [2025-09-06 19:30:13][][4283 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-09-06 19:30:13][][4283 ms][INFO] SUCCESS response from frida (len=95) [2025-09-06 19:30:15][352469859958424][0 ms][INFO] === Request start === [2025-09-06 19:30:15][352469859958424][1 ms][DEBUG] START check_scloud [2025-09-06 19:30:15][352469859958424][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:30:15][352469859958424][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 6838 16311 23945576 148848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:30:15][352469859958424][249 ms][DEBUG] targetPkg: running [2025-09-06 19:30:15][352469859958424][249 ms][DEBUG] END check_scloud in 249 ms [2025-09-06 19:30:15][352469859958424][249 ms][DEBUG] START check_boot_completed [2025-09-06 19:30:15][352469859958424][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:30:15][352469859958424][310 ms][DEBUG] ADB: done in 61 ms; out [2025-09-06 19:30:15][352469859958424][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:30:15][352469859958424][357 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:30:15][352469859958424][357 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 19:30:15][352469859958424][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:30:15][352469859958424][482 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3304\nsuccessfulTxPacketsPerSecond: 0.6702637487851469\nretriedTxPackets: 743\nretriedTxPacketsPerSecond: 0.19270082777572975\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2993\nsuccessfulRxPacketsPerSecond: 0.5697241864673749\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:30:15][352469859958424][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:30:16][352469859958424][857 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.117/228.117/228.117/0.000 ms\n [2025-09-06 19:30:16][352469859958424][857 ms][DEBUG] check_internet: online [2025-09-06 19:30:16][352469859958424][857 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:30:16][352469859958424][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859958424\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7956\"}'\'' -e'"" [2025-09-06 19:30:16][352469859958424][858 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:30:16][352469859958424][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859958424\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7956\"}'\'' -e'"" [2025-09-06 19:30:19][352469859958424][4481 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-09-06 19:30:19][352469859958424][4637 ms][DEBUG] proc_open done in 3779 ms; code=255; res.len=115 [2025-09-06 19:30:19][352469859958424][4637 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-06 19:30:19][352469859958424][4637 ms][INFO] SUCCESS response from frida (len=115) [2025-09-06 19:30:20][][0 ms][INFO] === Request start === [2025-09-06 19:30:20][][1 ms][DEBUG] START check_scloud [2025-09-06 19:30:20][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:30:20][][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 6838 16311 24122864 159828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:30:20][][285 ms][DEBUG] targetPkg: running [2025-09-06 19:30:20][][285 ms][DEBUG] END check_scloud in 284 ms [2025-09-06 19:30:20][][285 ms][DEBUG] START check_boot_completed [2025-09-06 19:30:20][][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:30:20][][316 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:30:20][][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:30:20][][379 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 19:30:20][][379 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 19:30:20][][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 19:30:20][][504 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3304\nsuccessfulTxPacketsPerSecond: 0.6702637487851469\nretriedTxPackets: 743\nretriedTxPacketsPerSecond: 0.19270082777572975\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2993\nsuccessfulRxPacketsPerSecond: 0.5697241864673749\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -45, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -45 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 19:30:20][][504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 19:30:21][][847 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.996/226.996/226.996/0.000 ms\n [2025-09-06 19:30:21][][848 ms][DEBUG] check_internet: online [2025-09-06 19:30:21][][848 ms][DEBUG] rawBody.length=1141 [2025-09-06 19:30:21][][848 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58T80SPHKB\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8190\"}'\'' -e'"" [2025-09-06 19:30:21][][848 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:30:21][][848 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58T80SPHKB\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8190\"}'\'' -e'"" [2025-09-06 19:30:25][][5596 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"SERIAL_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-09-06 19:30:25][][5752 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=95 [2025-09-06 19:30:25][][5752 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-09-06 19:30:25][][5752 ms][INFO] SUCCESS response from frida (len=95) [2025-09-06 19:43:03][355490891667705][1 ms][INFO] === Request start === [2025-09-06 19:43:03][355490891667705][1 ms][DEBUG] START check_scloud [2025-09-06 19:43:03][355490891667705][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:43:04][355490891667705][324 ms][DEBUG] SU: done in 322 ms; outu0_a118 6838 16311 24156624 146192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:43:04][355490891667705][324 ms][DEBUG] targetPkg: running [2025-09-06 19:43:04][355490891667705][324 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 19:43:04][355490891667705][324 ms][DEBUG] START check_boot_completed [2025-09-06 19:43:04][355490891667705][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:43:04][355490891667705][355 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:43:04][355490891667705][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:43:04][355490891667705][402 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:43:04][355490891667705][402 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 19:43:04][355490891667705][402 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:43:04][355490891667705][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490891667705\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7685\"}'\'' -e'"" [2025-09-06 19:43:04][355490891667705][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:43:04][355490891667705][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490891667705\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7685\"}'\'' -e'"" [2025-09-06 19:43:09][355490891667705][5213 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7a453b0-3921-4e25-920f-979828852d76","id":"QR_f7a453b0-3921-4e25-920f-979828852d76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:43:09][355490891667705][5369 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-06 19:43:09][355490891667705][5369 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-09-06 19:43:09][355490891667705][5370 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:43:11][355490891667705][0 ms][INFO] === Request start === [2025-09-06 19:43:11][355490891667705][1 ms][DEBUG] START check_scloud [2025-09-06 19:43:11][355490891667705][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:43:11][355490891667705][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 6838 16311 24353572 134184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:43:11][355490891667705][285 ms][DEBUG] targetPkg: running [2025-09-06 19:43:11][355490891667705][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 19:43:11][355490891667705][285 ms][DEBUG] START check_boot_completed [2025-09-06 19:43:11][355490891667705][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:43:11][355490891667705][332 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:43:11][355490891667705][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:43:12][355490891667705][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:43:12][355490891667705][379 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 19:43:12][355490891667705][379 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:43:12][355490891667705][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490891667705\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4973\"}'\'' -e'"" [2025-09-06 19:43:12][355490891667705][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:43:12][355490891667705][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490891667705\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4973\"}'\'' -e'"" [2025-09-06 19:43:16][355490891667705][5190 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28cd9469-841a-4634-b569-1504efebd63f","id":"QR_28cd9469-841a-4634-b569-1504efebd63f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:43:17][355490891667705][5346 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-06 19:43:17][355490891667705][5346 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-09-06 19:43:17][355490891667705][5346 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:45:05][355030762669396][0 ms][INFO] === Request start === [2025-09-06 19:45:05][355030762669396][0 ms][DEBUG] START check_scloud [2025-09-06 19:45:05][355030762669396][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:45:05][355030762669396][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 6838 16311 24448996 144940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:45:05][355030762669396][308 ms][DEBUG] targetPkg: running [2025-09-06 19:45:05][355030762669396][308 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 19:45:05][355030762669396][308 ms][DEBUG] START check_boot_completed [2025-09-06 19:45:05][355030762669396][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:45:05][355030762669396][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:45:05][355030762669396][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:45:05][355030762669396][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:45:05][355030762669396][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 19:45:05][355030762669396][386 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:45:05][355030762669396][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030762669396\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6407\"}'\'' -e'"" [2025-09-06 19:45:05][355030762669396][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:45:05][355030762669396][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030762669396\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6407\"}'\'' -e'"" [2025-09-06 19:45:11][355030762669396][6182 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4971c2ea-9d5e-48a2-91d4-9cbb4e1f4a71","id":"QR_4971c2ea-9d5e-48a2-91d4-9cbb4e1f4a71","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:45:11][355030762669396][6338 ms][DEBUG] proc_open done in 5952 ms; code=255; res.len=3343 [2025-09-06 19:45:11][355030762669396][6338 ms][DEBUG] END runCmdUntilRes#1 in 5952 ms [2025-09-06 19:45:11][355030762669396][6338 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:45:15][355030762669396][0 ms][INFO] === Request start === [2025-09-06 19:45:15][355030762669396][1 ms][DEBUG] START check_scloud [2025-09-06 19:45:15][355030762669396][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:45:15][355030762669396][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 6838 16311 24597740 156920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:45:15][355030762669396][318 ms][DEBUG] targetPkg: running [2025-09-06 19:45:15][355030762669396][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 19:45:15][355030762669396][318 ms][DEBUG] START check_boot_completed [2025-09-06 19:45:15][355030762669396][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:45:15][355030762669396][350 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:45:15][355030762669396][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:45:15][355030762669396][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:45:15][355030762669396][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 19:45:15][355030762669396][397 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:45:15][355030762669396][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030762669396\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2655\"}'\'' -e'"" [2025-09-06 19:45:15][355030762669396][397 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:45:15][355030762669396][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030762669396\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2655\"}'\'' -e'"" [2025-09-06 19:45:19][355030762669396][4208 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2bb78d54-0a1f-47c3-b887-300342f6ac6b","id":"QR_2bb78d54-0a1f-47c3-b887-300342f6ac6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:45:19][355030762669396][4364 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-09-06 19:45:19][355030762669396][4364 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-09-06 19:45:19][355030762669396][4364 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:47:04][354086980919345][0 ms][INFO] === Request start === [2025-09-06 19:47:04][354086980919345][1 ms][DEBUG] START check_scloud [2025-09-06 19:47:04][354086980919345][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:47:04][354086980919345][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 6838 16311 24699308 168152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:47:04][354086980919345][307 ms][DEBUG] targetPkg: running [2025-09-06 19:47:04][354086980919345][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 19:47:04][354086980919345][307 ms][DEBUG] START check_boot_completed [2025-09-06 19:47:04][354086980919345][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:47:04][354086980919345][338 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:47:04][354086980919345][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:47:04][354086980919345][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:47:04][354086980919345][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 19:47:04][354086980919345][386 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:47:04][354086980919345][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354086980919345\",\"model\":\"SM-A135U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2370\"}'\'' -e'"" [2025-09-06 19:47:04][354086980919345][386 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:47:04][354086980919345][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354086980919345\",\"model\":\"SM-A135U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2370\"}'\'' -e'"" [2025-09-06 19:47:11][354086980919345][6618 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_00799941-efc8-4cb2-a00e-698466abe444","id":"QR_00799941-efc8-4cb2-a00e-698466abe444","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:47:11][354086980919345][6774 ms][DEBUG] proc_open done in 6388 ms; code=255; res.len=3343 [2025-09-06 19:47:11][354086980919345][6774 ms][DEBUG] END runCmdUntilRes#1 in 6388 ms [2025-09-06 19:47:11][354086980919345][6774 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:47:14][354086980919345][1 ms][INFO] === Request start === [2025-09-06 19:47:14][354086980919345][1 ms][DEBUG] START check_scloud [2025-09-06 19:47:14][354086980919345][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:47:15][354086980919345][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 6838 16311 24843764 180312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:47:15][354086980919345][276 ms][DEBUG] targetPkg: running [2025-09-06 19:47:15][354086980919345][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-06 19:47:15][354086980919345][276 ms][DEBUG] START check_boot_completed [2025-09-06 19:47:15][354086980919345][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:47:15][354086980919345][322 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 19:47:15][354086980919345][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:47:15][354086980919345][384 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 19:47:15][354086980919345][384 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 19:47:15][354086980919345][384 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:47:15][354086980919345][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354086980919345\",\"model\":\"SM-A135U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6902\"}'\'' -e'"" [2025-09-06 19:47:15][354086980919345][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:47:15][354086980919345][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354086980919345\",\"model\":\"SM-A135U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6902\"}'\'' -e'"" [2025-09-06 19:47:19][354086980919345][4368 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2b08565-865c-430b-a8e7-6a5cad8cd304","id":"QR_c2b08565-865c-430b-a8e7-6a5cad8cd304","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:47:19][354086980919345][4524 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-09-06 19:47:19][354086980919345][4524 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-09-06 19:47:19][354086980919345][4524 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:51:05][354626190799647][1 ms][INFO] === Request start === [2025-09-06 19:51:05][354626190799647][1 ms][DEBUG] START check_scloud [2025-09-06 19:51:05][354626190799647][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:51:06][354626190799647][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 6838 16311 24939060 189772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:51:06][354626190799647][305 ms][DEBUG] targetPkg: running [2025-09-06 19:51:06][354626190799647][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 19:51:06][354626190799647][305 ms][DEBUG] START check_boot_completed [2025-09-06 19:51:06][354626190799647][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:51:06][354626190799647][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:51:06][354626190799647][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:51:06][354626190799647][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:51:06][354626190799647][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 19:51:06][354626190799647][383 ms][DEBUG] rawBody.length=1170 [2025-09-06 19:51:06][354626190799647][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626190799647\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9JT10L910Z\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5649\"}'\'' -e'"" [2025-09-06 19:51:06][354626190799647][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:51:06][354626190799647][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626190799647\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9JT10L910Z\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5649\"}'\'' -e'"" [2025-09-06 19:51:10][354626190799647][4632 ms][DEBUG] proc_open done in 4249 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 19:51:10][354626190799647][4632 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-06 19:51:10][354626190799647][4633 ms][WARN] Detected error: Process with pid 6838 either refused to load frida-agent, or terminated during injectionProcess with pid 6838 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 19:51:10][354626190799647][4633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 19:51:10][354626190799647][4945 ms][DEBUG] SU: done in 312 ms; outsystem 16544 16311 12790448 206812 ep_poll 0 S system_server\n [2025-09-06 19:51:10][354626190799647][4945 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 19:51:10][354626190799647][5101 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 19:51:10][354626190799647][5101 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 19:51:10][354626190799647][5101 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 19:51:10][354626190799647][5257 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 19:51:10][354626190799647][5257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 19:51:11][354626190799647][5491 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 19:51:13][354626190799647][7506 ms][DEBUG] START check_boot_completed [2025-09-06 19:51:13][354626190799647][7506 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:51:13][354626190799647][7553 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 19:51:13][354626190799647][7553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:51:13][354626190799647][7600 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:51:13][354626190799647][7600 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 19:51:16][354626190799647][10615 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 19:51:16][354626190799647][10615 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626190799647\",\"model\":\"SM-X200\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9JT10L910Z\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5649\"}'\'' -e'"" [2025-09-06 19:51:21][354626190799647][15676 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f35ff476-e07c-4e79-a303-d6347c0e33cd","id":"QR_f35ff476-e07c-4e79-a303-d6347c0e33cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:51:21][354626190799647][15832 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 19:51:21][354626190799647][15832 ms][DEBUG] END runCmdUntilRes#2 in 5218 ms [2025-09-06 19:51:21][354626190799647][15833 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:53:03][350857488924829][1 ms][INFO] === Request start === [2025-09-06 19:53:03][350857488924829][1 ms][DEBUG] START check_scloud [2025-09-06 19:53:03][350857488924829][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:53:03][350857488924829][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 9207 16311 23660920 125796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:53:03][350857488924829][300 ms][DEBUG] targetPkg: running [2025-09-06 19:53:03][350857488924829][300 ms][DEBUG] END check_scloud in 299 ms [2025-09-06 19:53:03][350857488924829][300 ms][DEBUG] START check_boot_completed [2025-09-06 19:53:03][350857488924829][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:53:03][350857488924829][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:53:03][350857488924829][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:53:03][350857488924829][393 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:53:03][350857488924829][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 19:53:03][350857488924829][394 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:53:03][350857488924829][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857488924829\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9703\"}'\'' -e'"" [2025-09-06 19:53:03][350857488924829][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:53:03][350857488924829][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857488924829\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9703\"}'\'' -e'"" [2025-09-06 19:53:08][350857488924829][4986 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0fe08720-96a6-4253-bee7-daec0f7cdea6","id":"QR_0fe08720-96a6-4253-bee7-daec0f7cdea6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:53:08][350857488924829][5142 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-09-06 19:53:08][350857488924829][5142 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-09-06 19:53:08][350857488924829][5142 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:53:10][350857488924829][0 ms][INFO] === Request start === [2025-09-06 19:53:10][350857488924829][1 ms][DEBUG] START check_scloud [2025-09-06 19:53:10][350857488924829][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:53:11][350857488924829][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 9207 16311 23805568 136564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:53:11][350857488924829][322 ms][DEBUG] targetPkg: running [2025-09-06 19:53:11][350857488924829][322 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 19:53:11][350857488924829][322 ms][DEBUG] START check_boot_completed [2025-09-06 19:53:11][350857488924829][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:53:11][350857488924829][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:53:11][350857488924829][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:53:11][350857488924829][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:53:11][350857488924829][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 19:53:11][350857488924829][416 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:53:11][350857488924829][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857488924829\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3600\"}'\'' -e'"" [2025-09-06 19:53:11][350857488924829][416 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:53:11][350857488924829][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857488924829\",\"model\":\"SM-A325F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3600\"}'\'' -e'"" [2025-09-06 19:53:16][350857488924829][5758 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4337e0d3-36ae-4f91-9fb6-33d376dff324","id":"QR_4337e0d3-36ae-4f91-9fb6-33d376dff324","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:53:16][350857488924829][5914 ms][DEBUG] proc_open done in 5499 ms; code=255; res.len=3343 [2025-09-06 19:53:16][350857488924829][5915 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-09-06 19:53:16][350857488924829][5915 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:57:03][351240641755225][1 ms][INFO] === Request start === [2025-09-06 19:57:03][351240641755225][1 ms][DEBUG] START check_scloud [2025-09-06 19:57:03][351240641755225][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:57:04][351240641755225][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 9207 16311 23898832 148948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:57:04][351240641755225][308 ms][DEBUG] targetPkg: running [2025-09-06 19:57:04][351240641755225][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 19:57:04][351240641755225][308 ms][DEBUG] START check_boot_completed [2025-09-06 19:57:04][351240641755225][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:57:04][351240641755225][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 19:57:04][351240641755225][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:57:04][351240641755225][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:57:04][351240641755225][387 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 19:57:04][351240641755225][387 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:57:04][351240641755225][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641755225\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6790\"}'\'' -e'"" [2025-09-06 19:57:04][351240641755225][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:57:04][351240641755225][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641755225\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6790\"}'\'' -e'"" [2025-09-06 19:57:09][351240641755225][5245 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d570768-75a3-42bd-a242-165c230f2ec2","id":"QR_3d570768-75a3-42bd-a242-165c230f2ec2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:57:09][351240641755225][5401 ms][DEBUG] proc_open done in 5013 ms; code=255; res.len=3343 [2025-09-06 19:57:09][351240641755225][5401 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-09-06 19:57:09][351240641755225][5401 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:57:11][351240641755225][0 ms][INFO] === Request start === [2025-09-06 19:57:11][351240641755225][1 ms][DEBUG] START check_scloud [2025-09-06 19:57:11][351240641755225][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:57:11][351240641755225][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 9207 16311 24065944 160120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:57:11][351240641755225][318 ms][DEBUG] targetPkg: running [2025-09-06 19:57:11][351240641755225][318 ms][DEBUG] END check_scloud in 318 ms [2025-09-06 19:57:11][351240641755225][319 ms][DEBUG] START check_boot_completed [2025-09-06 19:57:11][351240641755225][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:57:11][351240641755225][365 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 19:57:11][351240641755225][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:57:12][351240641755225][428 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 19:57:12][351240641755225][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 19:57:12][351240641755225][428 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:57:12][351240641755225][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641755225\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8907\"}'\'' -e'"" [2025-09-06 19:57:12][351240641755225][428 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:57:12][351240641755225][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641755225\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8907\"}'\'' -e'"" [2025-09-06 19:57:17][351240641755225][5458 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66ce9c9d-b26f-4196-8b26-ebbc419b0add","id":"QR_66ce9c9d-b26f-4196-8b26-ebbc419b0add","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:57:17][351240641755225][5614 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-09-06 19:57:17][351240641755225][5614 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-09-06 19:57:17][351240641755225][5614 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:57:21][351877476851247][0 ms][INFO] === Request start === [2025-09-06 19:57:21][351877476851247][1 ms][DEBUG] START check_scloud [2025-09-06 19:57:21][351877476851247][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:57:21][351877476851247][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 9207 16311 24207392 170868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:57:21][351877476851247][306 ms][DEBUG] targetPkg: running [2025-09-06 19:57:21][351877476851247][306 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 19:57:21][351877476851247][306 ms][DEBUG] START check_boot_completed [2025-09-06 19:57:21][351877476851247][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:57:21][351877476851247][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 19:57:21][351877476851247][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:57:21][351877476851247][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:57:21][351877476851247][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 19:57:21][351877476851247][400 ms][DEBUG] rawBody.length=1150 [2025-09-06 19:57:21][351877476851247][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877476851247\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2155\"}'\'' -e'"" [2025-09-06 19:57:21][351877476851247][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:57:21][351877476851247][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877476851247\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2155\"}'\'' -e'"" [2025-09-06 19:57:25][351877476851247][3852 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f5488c5-bb15-45cc-981c-3dbb1851ae04","id":"QR_2f5488c5-bb15-45cc-981c-3dbb1851ae04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:57:25][351877476851247][4008 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-09-06 19:57:25][351877476851247][4008 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-09-06 19:57:25][351877476851247][4009 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 19:57:28][351877476851247][0 ms][INFO] === Request start === [2025-09-06 19:57:28][351877476851247][1 ms][DEBUG] START check_scloud [2025-09-06 19:57:28][351877476851247][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 19:57:29][351877476851247][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 9207 16311 24320644 182780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 19:57:29][351877476851247][297 ms][DEBUG] targetPkg: running [2025-09-06 19:57:29][351877476851247][297 ms][DEBUG] END check_scloud in 296 ms [2025-09-06 19:57:29][351877476851247][297 ms][DEBUG] START check_boot_completed [2025-09-06 19:57:29][351877476851247][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 19:57:29][351877476851247][344 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 19:57:29][351877476851247][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 19:57:29][351877476851247][391 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 19:57:29][351877476851247][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 19:57:29][351877476851247][391 ms][DEBUG] rawBody.length=1160 [2025-09-06 19:57:29][351877476851247][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877476851247\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1906\"}'\'' -e'"" [2025-09-06 19:57:29][351877476851247][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 19:57:29][351877476851247][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877476851247\",\"model\":\"SM-E135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1906\"}'\'' -e'"" [2025-09-06 19:57:33][351877476851247][5171 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a72c571-1049-4228-952a-a5beb0a08c96","id":"QR_5a72c571-1049-4228-952a-a5beb0a08c96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 19:57:34][351877476851247][5327 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-06 19:57:34][351877476851247][5327 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-06 19:57:34][351877476851247][5327 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:00:03][359847106720833][1 ms][INFO] === Request start === [2025-09-06 20:00:03][359847106720833][1 ms][DEBUG] START check_scloud [2025-09-06 20:00:03][359847106720833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:00:03][359847106720833][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 9207 16311 24395552 194040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:00:03][359847106720833][304 ms][DEBUG] targetPkg: running [2025-09-06 20:00:03][359847106720833][304 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 20:00:03][359847106720833][304 ms][DEBUG] START check_boot_completed [2025-09-06 20:00:03][359847106720833][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:00:03][359847106720833][335 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 20:00:03][359847106720833][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:00:03][359847106720833][382 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:00:03][359847106720833][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 20:00:03][359847106720833][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:00:04][359847106720833][491 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4011\nsuccessfulTxPacketsPerSecond: 0.4173158246160694\nretriedTxPackets: 970\nretriedTxPacketsPerSecond: 0.11592106239335262\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3589\nsuccessfulRxPacketsPerSecond: 0.3477631871800579\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:00:04][359847106720833][492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:00:05][359847106720833][1944 ms][DEBUG] SU: done in 1453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.620/302.620/302.620/0.000 ms\n [2025-09-06 20:00:05][359847106720833][1944 ms][DEBUG] check_internet: online [2025-09-06 20:00:05][359847106720833][1944 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:00:05][359847106720833][1944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359847106720833\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9782\"}'\'' -e'"" [2025-09-06 20:00:05][359847106720833][1944 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:00:05][359847106720833][1945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359847106720833\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9782\"}'\'' -e'"" [2025-09-06 20:00:09][359847106720833][5849 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27c8d555-36e9-4453-bf7b-a63fb7a38985","id":"QR_27c8d555-36e9-4453-bf7b-a63fb7a38985","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:00:09][359847106720833][6005 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-06 20:00:09][359847106720833][6006 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-06 20:00:09][359847106720833][6006 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:00:11][359847106720833][0 ms][INFO] === Request start === [2025-09-06 20:00:11][359847106720833][1 ms][DEBUG] START check_scloud [2025-09-06 20:00:11][359847106720833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:00:12][359847106720833][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 9207 16311 24542248 205768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:00:12][359847106720833][310 ms][DEBUG] targetPkg: running [2025-09-06 20:00:12][359847106720833][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 20:00:12][359847106720833][310 ms][DEBUG] START check_boot_completed [2025-09-06 20:00:12][359847106720833][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:00:12][359847106720833][341 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 20:00:12][359847106720833][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:00:12][359847106720833][388 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:00:12][359847106720833][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 20:00:12][359847106720833][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:00:12][359847106720833][498 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4011\nsuccessfulTxPacketsPerSecond: 0.4173158246160694\nretriedTxPackets: 970\nretriedTxPacketsPerSecond: 0.11592106239335262\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3589\nsuccessfulRxPacketsPerSecond: 0.3477631871800579\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:00:12][359847106720833][498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:00:12][359847106720833][982 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=383 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 383.847/383.847/383.847/0.000 ms\n [2025-09-06 20:00:12][359847106720833][982 ms][DEBUG] check_internet: online [2025-09-06 20:00:12][359847106720833][982 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:00:12][359847106720833][982 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359847106720833\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9488\"}'\'' -e'"" [2025-09-06 20:00:12][359847106720833][982 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:00:12][359847106720833][982 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359847106720833\",\"model\":\"SM-G986B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9488\"}'\'' -e'"" [2025-09-06 20:00:17][359847106720833][5934 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dea3c86f-d1cd-4459-80dd-621f70aff069","id":"QR_dea3c86f-d1cd-4459-80dd-621f70aff069","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:00:18][359847106720833][6090 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-06 20:00:18][359847106720833][6090 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 20:00:18][359847106720833][6090 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:03:04][355030768392092][1 ms][INFO] === Request start === [2025-09-06 20:03:04][355030768392092][1 ms][DEBUG] START check_scloud [2025-09-06 20:03:04][355030768392092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:03:05][355030768392092][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 9207 16311 24664168 215900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:03:05][355030768392092][316 ms][DEBUG] targetPkg: running [2025-09-06 20:03:05][355030768392092][316 ms][DEBUG] END check_scloud in 314 ms [2025-09-06 20:03:05][355030768392092][316 ms][DEBUG] START check_boot_completed [2025-09-06 20:03:05][355030768392092][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:03:05][355030768392092][347 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 20:03:05][355030768392092][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:03:05][355030768392092][394 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:03:05][355030768392092][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 20:03:05][355030768392092][394 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:03:05][355030768392092][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030768392092\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3543\"}'\'' -e'"" [2025-09-06 20:03:05][355030768392092][394 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:03:05][355030768392092][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030768392092\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3543\"}'\'' -e'"" [2025-09-06 20:03:10][355030768392092][6220 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f90c0766-8c34-4f71-a1aa-dc162c7d842b","id":"QR_f90c0766-8c34-4f71-a1aa-dc162c7d842b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:03:11][355030768392092][6376 ms][DEBUG] proc_open done in 5983 ms; code=255; res.len=3343 [2025-09-06 20:03:11][355030768392092][6377 ms][DEBUG] END runCmdUntilRes#1 in 5983 ms [2025-09-06 20:03:11][355030768392092][6377 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:03:14][355030768392092][0 ms][INFO] === Request start === [2025-09-06 20:03:14][355030768392092][1 ms][DEBUG] START check_scloud [2025-09-06 20:03:14][355030768392092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:03:14][355030768392092][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 9207 16311 24845684 227872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:03:14][355030768392092][320 ms][DEBUG] targetPkg: running [2025-09-06 20:03:14][355030768392092][320 ms][DEBUG] END check_scloud in 319 ms [2025-09-06 20:03:14][355030768392092][320 ms][DEBUG] START check_boot_completed [2025-09-06 20:03:14][355030768392092][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:03:14][355030768392092][366 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 20:03:14][355030768392092][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:03:15][355030768392092][429 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 20:03:15][355030768392092][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 20:03:15][355030768392092][429 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:03:15][355030768392092][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030768392092\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3161\"}'\'' -e'"" [2025-09-06 20:03:15][355030768392092][429 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:03:15][355030768392092][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030768392092\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3161\"}'\'' -e'"" [2025-09-06 20:03:18][355030768392092][4272 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92590c3f-906e-49b4-91a5-c034b29ef1f6","id":"QR_92590c3f-906e-49b4-91a5-c034b29ef1f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:03:19][355030768392092][4428 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-09-06 20:03:19][355030768392092][4428 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-09-06 20:03:19][355030768392092][4428 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:04:03][357967978925161][0 ms][INFO] === Request start === [2025-09-06 20:04:03][357967978925161][1 ms][DEBUG] START check_scloud [2025-09-06 20:04:03][357967978925161][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:04:03][357967978925161][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 9207 16311 24974956 238916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:04:03][357967978925161][310 ms][DEBUG] targetPkg: running [2025-09-06 20:04:03][357967978925161][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 20:04:03][357967978925161][310 ms][DEBUG] START check_boot_completed [2025-09-06 20:04:03][357967978925161][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:04:03][357967978925161][355 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 20:04:03][357967978925161][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:04:03][357967978925161][418 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 20:04:03][357967978925161][418 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 20:04:03][357967978925161][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:04:03][357967978925161][543 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4094\nsuccessfulTxPacketsPerSecond: 0.2710602374226417\nretriedTxPackets: 1004\nretriedTxPacketsPerSecond: 0.11103672376349177\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3655\nsuccessfulRxPacketsPerSecond: 0.2155418755408958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:04:03][357967978925161][543 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:04:04][357967978925161][1902 ms][DEBUG] SU: done in 1359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.392/300.392/300.392/0.000 ms\n [2025-09-06 20:04:04][357967978925161][1902 ms][DEBUG] check_internet: online [2025-09-06 20:04:04][357967978925161][1902 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:04:04][357967978925161][1902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978925161\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7180\"}'\'' -e'"" [2025-09-06 20:04:04][357967978925161][1902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:04:04][357967978925161][1902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978925161\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7180\"}'\'' -e'"" [2025-09-06 20:04:08][357967978925161][5776 ms][DEBUG] proc_open done in 3873 ms (timeout); code=4; out.len=0 err.len=90 [2025-09-06 20:04:08][357967978925161][5776 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-09-06 20:04:08][357967978925161][5776 ms][WARN] Detected error: Process with pid 9207 either refused to load frida-agent, or terminated during injectionProcess with pid 9207 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 20:04:08][357967978925161][5776 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 20:04:09][357967978925161][6026 ms][DEBUG] SU: done in 250 ms; outsystem 16544 16311 12786300 194324 ep_poll 0 S system_server\n [2025-09-06 20:04:09][357967978925161][6026 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 20:04:09][357967978925161][6167 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 20:04:09][357967978925161][6167 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 20:04:09][357967978925161][6167 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 20:04:09][357967978925161][6354 ms][DEBUG] SU: done in 187 ms; out [2025-09-06 20:04:09][357967978925161][6354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 20:04:09][357967978925161][6494 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 20:04:11][357967978925161][8509 ms][DEBUG] START check_boot_completed [2025-09-06 20:04:11][357967978925161][8509 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:04:11][357967978925161][8556 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 20:04:11][357967978925161][8556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:04:11][357967978925161][8603 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:04:11][357967978925161][8603 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 20:04:14][357967978925161][11618 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 20:04:14][357967978925161][11618 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978925161\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7180\"}'\'' -e'"" [2025-09-06 20:04:18][357967978925161][15351 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c83b4dd-1e94-452d-9cec-8bbfd48658fa","id":"QR_7c83b4dd-1e94-452d-9cec-8bbfd48658fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:04:18][357967978925161][15508 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-09-06 20:04:18][357967978925161][15508 ms][DEBUG] END runCmdUntilRes#2 in 3890 ms [2025-09-06 20:04:18][357967978925161][15508 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:04:20][357967978925161][0 ms][INFO] === Request start === [2025-09-06 20:04:20][357967978925161][1 ms][DEBUG] START check_scloud [2025-09-06 20:04:20][357967978925161][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:04:21][357967978925161][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 10588 16311 23646432 124928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:04:21][357967978925161][256 ms][DEBUG] targetPkg: running [2025-09-06 20:04:21][357967978925161][256 ms][DEBUG] END check_scloud in 255 ms [2025-09-06 20:04:21][357967978925161][256 ms][DEBUG] START check_boot_completed [2025-09-06 20:04:21][357967978925161][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:04:21][357967978925161][303 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 20:04:21][357967978925161][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:04:21][357967978925161][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:04:21][357967978925161][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 20:04:21][357967978925161][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:04:21][357967978925161][459 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4094\nsuccessfulTxPacketsPerSecond: 0.2710602374226417\nretriedTxPackets: 1004\nretriedTxPacketsPerSecond: 0.11103672376349177\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3655\nsuccessfulRxPacketsPerSecond: 0.2155418755408958\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:04:21][357967978925161][459 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:04:21][357967978925161][881 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=316 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 316.701/316.701/316.701/0.000 ms\n [2025-09-06 20:04:21][357967978925161][881 ms][DEBUG] check_internet: online [2025-09-06 20:04:21][357967978925161][881 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:04:21][357967978925161][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978925161\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4105\"}'\'' -e'"" [2025-09-06 20:04:21][357967978925161][881 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:04:21][357967978925161][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978925161\",\"model\":\"SM-A165F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4105\"}'\'' -e'"" [2025-09-06 20:04:27][357967978925161][6129 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c13e7a14-c007-4d4d-8928-134995636a5b","id":"QR_c13e7a14-c007-4d4d-8928-134995636a5b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:04:27][357967978925161][6286 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-06 20:04:27][357967978925161][6286 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-06 20:04:27][357967978925161][6286 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:10:03][352469851138215][1 ms][INFO] === Request start === [2025-09-06 20:10:03][352469851138215][1 ms][DEBUG] START check_scloud [2025-09-06 20:10:03][352469851138215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:10:03][352469851138215][293 ms][DEBUG] SU: done in 291 ms; outu0_a118 10588 16311 23692364 138496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:10:03][352469851138215][293 ms][DEBUG] targetPkg: running [2025-09-06 20:10:03][352469851138215][293 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 20:10:03][352469851138215][293 ms][DEBUG] START check_boot_completed [2025-09-06 20:10:03][352469851138215][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:10:03][352469851138215][323 ms][DEBUG] ADB: done in 30 ms; out [2025-09-06 20:10:03][352469851138215][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:10:03][352469851138215][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:10:03][352469851138215][370 ms][DEBUG] END check_boot_completed in 77 ms [2025-09-06 20:10:03][352469851138215][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:10:03][352469851138215][479 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4220\nsuccessfulTxPacketsPerSecond: 0.8958216319595032\nretriedTxPackets: 1044\nretriedTxPacketsPerSecond: 0.2843878196696836\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3762\nsuccessfulRxPacketsPerSecond: 0.7607374176164035\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:10:03][352469851138215][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:10:05][352469851138215][1963 ms][DEBUG] SU: done in 1484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.130/301.130/301.130/0.000 ms\n [2025-09-06 20:10:05][352469851138215][1963 ms][DEBUG] check_internet: online [2025-09-06 20:10:05][352469851138215][1963 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:10:05][352469851138215][1963 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469851138215\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9855\"}'\'' -e'"" [2025-09-06 20:10:05][352469851138215][1963 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:10:05][352469851138215][1963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469851138215\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9855\"}'\'' -e'"" [2025-09-06 20:10:09][352469851138215][6056 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10d340a3-23a7-4c90-9316-6df55ace6860","id":"QR_10d340a3-23a7-4c90-9316-6df55ace6860","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:10:09][352469851138215][6212 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-09-06 20:10:09][352469851138215][6212 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-06 20:10:09][352469851138215][6212 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:10:11][352469851138215][0 ms][INFO] === Request start === [2025-09-06 20:10:11][352469851138215][1 ms][DEBUG] START check_scloud [2025-09-06 20:10:11][352469851138215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:10:12][352469851138215][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 10588 16311 23865428 150200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:10:12][352469851138215][305 ms][DEBUG] targetPkg: running [2025-09-06 20:10:12][352469851138215][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 20:10:12][352469851138215][305 ms][DEBUG] START check_boot_completed [2025-09-06 20:10:12][352469851138215][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:10:12][352469851138215][350 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 20:10:12][352469851138215][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:10:12][352469851138215][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:10:12][352469851138215][397 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 20:10:12][352469851138215][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:10:12][352469851138215][506 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4220\nsuccessfulTxPacketsPerSecond: 0.8958216319595032\nretriedTxPackets: 1044\nretriedTxPacketsPerSecond: 0.2843878196696836\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3762\nsuccessfulRxPacketsPerSecond: 0.7607374176164035\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:10:12][352469851138215][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:10:12][352469851138215][866 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.013/226.013/226.013/0.000 ms\n [2025-09-06 20:10:12][352469851138215][866 ms][DEBUG] check_internet: online [2025-09-06 20:10:12][352469851138215][866 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:10:12][352469851138215][866 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469851138215\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5890\"}'\'' -e'"" [2025-09-06 20:10:12][352469851138215][866 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:10:12][352469851138215][866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469851138215\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5890\"}'\'' -e'"" [2025-09-06 20:10:17][352469851138215][6036 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba2a3424-a084-4881-b8ae-736ee36b4a76","id":"QR_ba2a3424-a084-4881-b8ae-736ee36b4a76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:10:18][352469851138215][6192 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-09-06 20:10:18][352469851138215][6192 ms][DEBUG] END runCmdUntilRes#1 in 5326 ms [2025-09-06 20:10:18][352469851138215][6192 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:10:23][359410822129498][1 ms][INFO] === Request start === [2025-09-06 20:10:23][359410822129498][1 ms][DEBUG] START check_scloud [2025-09-06 20:10:23][359410822129498][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:10:23][359410822129498][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 10588 16311 23999708 161572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:10:23][359410822129498][276 ms][DEBUG] targetPkg: running [2025-09-06 20:10:23][359410822129498][276 ms][DEBUG] END check_scloud in 275 ms [2025-09-06 20:10:23][359410822129498][276 ms][DEBUG] START check_boot_completed [2025-09-06 20:10:23][359410822129498][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:10:23][359410822129498][307 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 20:10:23][359410822129498][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:10:23][359410822129498][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:10:23][359410822129498][354 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 20:10:23][359410822129498][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:10:23][359410822129498][464 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4342\nsuccessfulTxPacketsPerSecond: 0.40537487207432316\nretriedTxPackets: 1075\nretriedTxPacketsPerSecond: 0.1030050904451149\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3878\nsuccessfulRxPacketsPerSecond: 0.3854384029559138\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:10:23][359410822129498][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:10:24][359410822129498][901 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=338 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 338.600/338.600/338.600/0.000 ms\n [2025-09-06 20:10:24][359410822129498][901 ms][DEBUG] check_internet: online [2025-09-06 20:10:24][359410822129498][901 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:10:24][359410822129498][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359410822129498\",\"model\":\"SM-A125M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2483\"}'\'' -e'"" [2025-09-06 20:10:24][359410822129498][901 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:10:24][359410822129498][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359410822129498\",\"model\":\"SM-A125M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2483\"}'\'' -e'"" [2025-09-06 20:10:29][359410822129498][5650 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24056c1a-6cd6-4c99-90eb-f01ddb15159c","id":"QR_24056c1a-6cd6-4c99-90eb-f01ddb15159c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:10:29][359410822129498][5806 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-09-06 20:10:29][359410822129498][5806 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-09-06 20:10:29][359410822129498][5806 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:10:32][359410822129498][0 ms][INFO] === Request start === [2025-09-06 20:10:32][359410822129498][1 ms][DEBUG] START check_scloud [2025-09-06 20:10:32][359410822129498][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:10:32][359410822129498][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 10588 16311 24154560 172592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:10:32][359410822129498][303 ms][DEBUG] targetPkg: running [2025-09-06 20:10:32][359410822129498][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 20:10:32][359410822129498][303 ms][DEBUG] START check_boot_completed [2025-09-06 20:10:32][359410822129498][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:10:32][359410822129498][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 20:10:32][359410822129498][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:10:33][359410822129498][397 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:10:33][359410822129498][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 20:10:33][359410822129498][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:10:33][359410822129498][506 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4342\nsuccessfulTxPacketsPerSecond: 0.40537487207432316\nretriedTxPackets: 1075\nretriedTxPacketsPerSecond: 0.1030050904451149\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3878\nsuccessfulRxPacketsPerSecond: 0.3854384029559138\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:10:33][359410822129498][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:10:33][359410822129498][959 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=320 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 320.776/320.776/320.776/0.000 ms\n [2025-09-06 20:10:33][359410822129498][959 ms][DEBUG] check_internet: online [2025-09-06 20:10:33][359410822129498][959 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:10:33][359410822129498][959 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359410822129498\",\"model\":\"SM-A125M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2218\"}'\'' -e'"" [2025-09-06 20:10:33][359410822129498][959 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:10:33][359410822129498][959 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359410822129498\",\"model\":\"SM-A125M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2218\"}'\'' -e'"" [2025-09-06 20:10:37][359410822129498][4443 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78329021-5398-4b7d-a911-92d6d2b047eb","id":"QR_78329021-5398-4b7d-a911-92d6d2b047eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:10:37][359410822129498][4599 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-09-06 20:10:37][359410822129498][4599 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-09-06 20:10:37][359410822129498][4599 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:13:03][351240644045129][1 ms][INFO] === Request start === [2025-09-06 20:13:03][351240644045129][1 ms][DEBUG] START check_scloud [2025-09-06 20:13:03][351240644045129][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:13:03][351240644045129][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 10588 16311 24229340 184672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:13:03][351240644045129][312 ms][DEBUG] targetPkg: running [2025-09-06 20:13:03][351240644045129][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 20:13:03][351240644045129][312 ms][DEBUG] START check_boot_completed [2025-09-06 20:13:03][351240644045129][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:13:03][351240644045129][343 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 20:13:03][351240644045129][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:13:03][351240644045129][390 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:13:03][351240644045129][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 20:13:03][351240644045129][391 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:13:03][351240644045129][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240644045129\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1309\"}'\'' -e'"" [2025-09-06 20:13:03][351240644045129][391 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:13:03][351240644045129][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240644045129\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1309\"}'\'' -e'"" [2025-09-06 20:13:08][351240644045129][4921 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7130ed09-b242-48df-887b-8854c2d0277d","id":"QR_7130ed09-b242-48df-887b-8854c2d0277d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:13:08][351240644045129][5077 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-09-06 20:13:08][351240644045129][5077 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-09-06 20:13:08][351240644045129][5077 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:13:10][351240644045129][1 ms][INFO] === Request start === [2025-09-06 20:13:10][351240644045129][1 ms][DEBUG] START check_scloud [2025-09-06 20:13:10][351240644045129][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:13:11][351240644045129][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 10588 16311 24371812 195464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:13:11][351240644045129][282 ms][DEBUG] targetPkg: running [2025-09-06 20:13:11][351240644045129][282 ms][DEBUG] END check_scloud in 281 ms [2025-09-06 20:13:11][351240644045129][282 ms][DEBUG] START check_boot_completed [2025-09-06 20:13:11][351240644045129][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:13:11][351240644045129][327 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 20:13:11][351240644045129][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:13:11][351240644045129][390 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 20:13:11][351240644045129][390 ms][DEBUG] END check_boot_completed in 108 ms [2025-09-06 20:13:11][351240644045129][390 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:13:11][351240644045129][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240644045129\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8460\"}'\'' -e'"" [2025-09-06 20:13:11][351240644045129][390 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:13:11][351240644045129][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240644045129\",\"model\":\"SM-M135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8460\"}'\'' -e'"" [2025-09-06 20:13:16][351240644045129][5357 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ef26d2d-9db3-48c3-9bae-adf25d08e696","id":"QR_3ef26d2d-9db3-48c3-9bae-adf25d08e696","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:13:16][351240644045129][5514 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-09-06 20:13:16][351240644045129][5514 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-09-06 20:13:16][351240644045129][5514 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:23:06][351007333441889][1 ms][INFO] === Request start === [2025-09-06 20:23:06][351007333441889][1 ms][DEBUG] START check_scloud [2025-09-06 20:23:06][351007333441889][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:23:06][351007333441889][261 ms][DEBUG] SU: done in 259 ms; outu0_a118 10588 16311 24453720 204668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:23:06][351007333441889][261 ms][DEBUG] targetPkg: running [2025-09-06 20:23:06][351007333441889][261 ms][DEBUG] END check_scloud in 260 ms [2025-09-06 20:23:06][351007333441889][261 ms][DEBUG] START check_boot_completed [2025-09-06 20:23:06][351007333441889][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:23:06][351007333441889][292 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 20:23:06][351007333441889][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:23:06][351007333441889][339 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:23:06][351007333441889][340 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 20:23:06][351007333441889][340 ms][DEBUG] rawBody.length=1170 [2025-09-06 20:23:06][351007333441889][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007333441889\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52WA0D0NSX\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4325\"}'\'' -e'"" [2025-09-06 20:23:06][351007333441889][340 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:23:06][351007333441889][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007333441889\",\"model\":\"SM-X510\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52WA0D0NSX\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4325\"}'\'' -e'"" [2025-09-06 20:23:12][351007333441889][6056 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a9de32a-2d80-4141-a76f-11d8a372b375","id":"QR_8a9de32a-2d80-4141-a76f-11d8a372b375","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:23:12][351007333441889][6212 ms][DEBUG] proc_open done in 5873 ms; code=255; res.len=3343 [2025-09-06 20:23:12][351007333441889][6213 ms][DEBUG] END runCmdUntilRes#1 in 5873 ms [2025-09-06 20:23:12][351007333441889][6213 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:30:03][352019881148021][1 ms][INFO] === Request start === [2025-09-06 20:30:03][352019881148021][1 ms][DEBUG] START check_scloud [2025-09-06 20:30:03][352019881148021][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:30:03][352019881148021][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 10588 16311 24561468 202856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:30:03][352019881148021][293 ms][DEBUG] targetPkg: running [2025-09-06 20:30:03][352019881148021][293 ms][DEBUG] END check_scloud in 292 ms [2025-09-06 20:30:03][352019881148021][293 ms][DEBUG] START check_boot_completed [2025-09-06 20:30:03][352019881148021][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:30:03][352019881148021][325 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 20:30:03][352019881148021][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:30:03][352019881148021][387 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 20:30:03][352019881148021][387 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 20:30:03][352019881148021][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:30:03][352019881148021][512 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4902\nsuccessfulTxPacketsPerSecond: 7.860610678568573\nretriedTxPackets: 1171\nretriedTxPacketsPerSecond: 0.40740971138938087\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4495\nsuccessfulRxPacketsPerSecond: 10.041450832952195\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:30:03][352019881148021][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:30:05][352019881148021][1902 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=302 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 302.238/302.238/302.238/0.000 ms\n [2025-09-06 20:30:05][352019881148021][1902 ms][DEBUG] check_internet: online [2025-09-06 20:30:05][352019881148021][1902 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:30:05][352019881148021][1902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352019881148021\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9591\"}'\'' -e'"" [2025-09-06 20:30:05][352019881148021][1902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:30:05][352019881148021][1902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352019881148021\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9591\"}'\'' -e'"" [2025-09-06 20:30:09][352019881148021][5808 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7264731-0409-45e0-825d-ac759e889e20","id":"QR_c7264731-0409-45e0-825d-ac759e889e20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:30:09][352019881148021][5964 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-06 20:30:09][352019881148021][5964 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-09-06 20:30:09][352019881148021][5964 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:30:11][352019881148021][0 ms][INFO] === Request start === [2025-09-06 20:30:11][352019881148021][1 ms][DEBUG] START check_scloud [2025-09-06 20:30:11][352019881148021][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:30:11][352019881148021][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 10588 16311 24707216 201648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:30:11][352019881148021][312 ms][DEBUG] targetPkg: running [2025-09-06 20:30:11][352019881148021][312 ms][DEBUG] END check_scloud in 311 ms [2025-09-06 20:30:11][352019881148021][312 ms][DEBUG] START check_boot_completed [2025-09-06 20:30:11][352019881148021][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:30:12][352019881148021][359 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 20:30:12][352019881148021][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:30:12][352019881148021][405 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:30:12][352019881148021][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 20:30:12][352019881148021][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:30:12][352019881148021][515 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4902\nsuccessfulTxPacketsPerSecond: 7.860610678568573\nretriedTxPackets: 1171\nretriedTxPacketsPerSecond: 0.40740971138938087\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4495\nsuccessfulRxPacketsPerSecond: 10.041450832952195\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:30:12][352019881148021][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:30:12][352019881148021][859 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.386/245.386/245.386/0.000 ms\n [2025-09-06 20:30:12][352019881148021][859 ms][DEBUG] check_internet: online [2025-09-06 20:30:12][352019881148021][859 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:30:12][352019881148021][859 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352019881148021\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1650\"}'\'' -e'"" [2025-09-06 20:30:12][352019881148021][859 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:30:12][352019881148021][859 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352019881148021\",\"model\":\"SM-A346M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1650\"}'\'' -e'"" [2025-09-06 20:30:17][352019881148021][6232 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ae4d009-18c7-45b1-aedf-91aa30cfdcff","id":"QR_5ae4d009-18c7-45b1-aedf-91aa30cfdcff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:30:18][352019881148021][6388 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-09-06 20:30:18][352019881148021][6388 ms][DEBUG] END runCmdUntilRes#1 in 5530 ms [2025-09-06 20:30:18][352019881148021][6388 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:34:28][][4 ms][INFO] === Request start === [2025-09-06 20:34:28][][4 ms][DEBUG] START check_scloud [2025-09-06 20:34:28][][4 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:34:28][][286 ms][DEBUG] SU: done in 282 ms; outu0_a118 10588 16311 24834896 206712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:34:28][][286 ms][DEBUG] targetPkg: running [2025-09-06 20:34:28][][286 ms][DEBUG] END check_scloud in 282 ms [2025-09-06 20:34:28][][286 ms][DEBUG] START check_boot_completed [2025-09-06 20:34:28][][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:34:28][][333 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 20:34:28][][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:34:28][][380 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:34:28][][380 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 20:34:28][][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:34:29][][489 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4991\nsuccessfulTxPacketsPerSecond: 0.34110725715271256\nretriedTxPackets: 1198\nretriedTxPacketsPerSecond: 0.10348197688902516\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4577\nsuccessfulRxPacketsPerSecond: 0.3142785964777801\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:34:29][][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:34:29][][973 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=346 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 346.452/346.452/346.452/0.000 ms\n [2025-09-06 20:34:29][][973 ms][DEBUG] check_internet: online [2025-09-06 20:34:29][][974 ms][DEBUG] rawBody.length=0 [2025-09-06 20:34:29][][974 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"\",\"profile_ID\":\"\",\"group\":\"\",\"type\":\"KC\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":null,\"email\":null,\"carrier\":null,\"os\":null,\"knoxSdkVersion\":null,\"deviceId\":null}'\'' -e'"" [2025-09-06 20:34:29][][974 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:34:29][][974 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"\",\"profile_ID\":\"\",\"group\":\"\",\"type\":\"KC\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":null,\"email\":null,\"carrier\":null,\"os\":null,\"knoxSdkVersion\":null,\"deviceId\":null}'\'' -e'"" [2025-09-06 20:34:34][][5644 ms][DEBUG] proc_open done in 4670 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 20:34:34][][5644 ms][DEBUG] END runCmdUntilRes#1 in 4671 ms [2025-09-06 20:34:34][][5644 ms][WARN] Detected error: Process with pid 10588 either refused to load frida-agent, or terminated during injectionProcess with pid 10588 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 20:34:34][][5644 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 20:34:34][][5941 ms][DEBUG] SU: done in 296 ms; outsystem 16544 16311 13278096 223224 ep_poll 0 S system_server\n [2025-09-06 20:34:34][][5941 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 20:34:34][][6081 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 20:34:34][][6082 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 20:34:34][][6082 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 20:34:34][][6206 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 20:34:34][][6207 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 20:34:34][][6394 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 20:34:36][][8409 ms][DEBUG] START check_boot_completed [2025-09-06 20:34:36][][8409 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:34:37][][8456 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 20:34:37][][8456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:34:37][][8518 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 20:34:37][][8518 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 20:34:40][][11533 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 20:34:40][][11533 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"\",\"profile_ID\":\"\",\"group\":\"\",\"type\":\"KC\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":null,\"email\":null,\"carrier\":null,\"os\":null,\"knoxSdkVersion\":null,\"deviceId\":null}'\'' -e'"" [2025-09-06 20:34:44][][15438 ms][DEBUG] frida res:res:{"code":4000000,"message":"RESOURCE_INVALID_PARAM","data":"Missing device UID from request"}\r\n [2025-09-06 20:34:44][][15595 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=92 [2025-09-06 20:34:44][][15595 ms][DEBUG] END runCmdUntilRes#2 in 4062 ms [2025-09-06 20:34:44][][15595 ms][INFO] SUCCESS response from frida (len=92) [2025-09-06 20:36:03][356990910861436][1 ms][INFO] === Request start === [2025-09-06 20:36:03][356990910861436][1 ms][DEBUG] START check_scloud [2025-09-06 20:36:03][356990910861436][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:36:03][356990910861436][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 13473 16311 23597656 127016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:36:03][356990910861436][321 ms][DEBUG] targetPkg: running [2025-09-06 20:36:03][356990910861436][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 20:36:03][356990910861436][321 ms][DEBUG] START check_boot_completed [2025-09-06 20:36:03][356990910861436][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:36:04][356990910861436][368 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 20:36:04][356990910861436][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:36:04][356990910861436][432 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 20:36:04][356990910861436][432 ms][DEBUG] END check_boot_completed in 110 ms [2025-09-06 20:36:04][356990910861436][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:36:04][356990910861436][540 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4991\nsuccessfulTxPacketsPerSecond: 0.34110725715271256\nretriedTxPackets: 1198\nretriedTxPacketsPerSecond: 0.10348197688902516\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4577\nsuccessfulRxPacketsPerSecond: 0.3142785964777801\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:36:04][356990910861436][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:36:04][356990910861436][915 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.762/247.762/247.762/0.000 ms\n [2025-09-06 20:36:04][356990910861436][915 ms][DEBUG] check_internet: online [2025-09-06 20:36:04][356990910861436][915 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:36:04][356990910861436][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990910861436\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3697\"}'\'' -e'"" [2025-09-06 20:36:04][356990910861436][915 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:36:04][356990910861436][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990910861436\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3697\"}'\'' -e'"" [2025-09-06 20:36:09][356990910861436][5788 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_125b37e9-9e00-4513-9f2c-f6a58cc60f03","id":"QR_125b37e9-9e00-4513-9f2c-f6a58cc60f03","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:36:09][356990910861436][5945 ms][DEBUG] proc_open done in 5029 ms; code=255; res.len=3343 [2025-09-06 20:36:09][356990910861436][5945 ms][DEBUG] END runCmdUntilRes#1 in 5029 ms [2025-09-06 20:36:09][356990910861436][5945 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:36:11][356990910861436][0 ms][INFO] === Request start === [2025-09-06 20:36:11][356990910861436][1 ms][DEBUG] START check_scloud [2025-09-06 20:36:11][356990910861436][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:36:12][356990910861436][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 13473 16311 23786364 137768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:36:12][356990910861436][313 ms][DEBUG] targetPkg: running [2025-09-06 20:36:12][356990910861436][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 20:36:12][356990910861436][313 ms][DEBUG] START check_boot_completed [2025-09-06 20:36:12][356990910861436][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:36:12][356990910861436][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 20:36:12][356990910861436][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:36:12][356990910861436][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 20:36:12][356990910861436][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 20:36:12][356990910861436][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:36:12][356990910861436][547 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4991\nsuccessfulTxPacketsPerSecond: 0.34110725715271256\nretriedTxPackets: 1198\nretriedTxPacketsPerSecond: 0.10348197688902516\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4577\nsuccessfulRxPacketsPerSecond: 0.3142785964777801\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:36:12][356990910861436][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:36:12][356990910861436][938 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=287 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 287.304/287.304/287.304/0.000 ms\n [2025-09-06 20:36:12][356990910861436][938 ms][DEBUG] check_internet: online [2025-09-06 20:36:12][356990910861436][938 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:36:12][356990910861436][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990910861436\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6981\"}'\'' -e'"" [2025-09-06 20:36:12][356990910861436][938 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:36:12][356990910861436][939 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990910861436\",\"model\":\"SM-A135F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6981\"}'\'' -e'"" [2025-09-06 20:36:17][356990910861436][5890 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94d24997-4b9c-48f8-a1bb-61c0f814915a","id":"QR_94d24997-4b9c-48f8-a1bb-61c0f814915a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:36:17][356990910861436][6046 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-06 20:36:17][356990910861436][6046 ms][DEBUG] END runCmdUntilRes#1 in 5107 ms [2025-09-06 20:36:17][356990910861436][6046 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:36:23][356408516785156][1 ms][INFO] === Request start === [2025-09-06 20:36:23][356408516785156][1 ms][DEBUG] START check_scloud [2025-09-06 20:36:23][356408516785156][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:36:23][356408516785156][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 13473 16311 23949124 149400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:36:23][356408516785156][313 ms][DEBUG] targetPkg: running [2025-09-06 20:36:23][356408516785156][313 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 20:36:23][356408516785156][313 ms][DEBUG] START check_boot_completed [2025-09-06 20:36:23][356408516785156][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:36:23][356408516785156][360 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 20:36:23][356408516785156][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:36:23][356408516785156][422 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 20:36:23][356408516785156][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 20:36:23][356408516785156][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:36:24][356408516785156][563 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4991\nsuccessfulTxPacketsPerSecond: 0.34110725715271256\nretriedTxPackets: 1198\nretriedTxPacketsPerSecond: 0.10348197688902516\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4577\nsuccessfulRxPacketsPerSecond: 0.3142785964777801\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:36:24][356408516785156][563 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:36:24][356408516785156][938 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=275 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 275.042/275.042/275.042/0.000 ms\n [2025-09-06 20:36:24][356408516785156][938 ms][DEBUG] check_internet: online [2025-09-06 20:36:24][356408516785156][938 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:36:24][356408516785156][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356408516785156\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5349\"}'\'' -e'"" [2025-09-06 20:36:24][356408516785156][938 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:36:24][356408516785156][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356408516785156\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5349\"}'\'' -e'"" [2025-09-06 20:36:29][356408516785156][5890 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_958fd44a-55b0-4173-84f7-4e95081284b5","id":"QR_958fd44a-55b0-4173-84f7-4e95081284b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:36:29][356408516785156][6046 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-09-06 20:36:29][356408516785156][6046 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 20:36:29][356408516785156][6046 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:36:33][356408516785156][0 ms][INFO] === Request start === [2025-09-06 20:36:33][356408516785156][1 ms][DEBUG] START check_scloud [2025-09-06 20:36:33][356408516785156][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:36:33][356408516785156][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 13473 16311 24060840 160520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:36:33][356408516785156][306 ms][DEBUG] targetPkg: running [2025-09-06 20:36:33][356408516785156][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 20:36:33][356408516785156][307 ms][DEBUG] START check_boot_completed [2025-09-06 20:36:33][356408516785156][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:36:33][356408516785156][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 20:36:33][356408516785156][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:36:33][356408516785156][401 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 20:36:33][356408516785156][401 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 20:36:33][356408516785156][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:36:33][356408516785156][525 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4991\nsuccessfulTxPacketsPerSecond: 0.34110725715271256\nretriedTxPackets: 1198\nretriedTxPacketsPerSecond: 0.10348197688902516\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4577\nsuccessfulRxPacketsPerSecond: 0.3142785964777801\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:36:33][356408516785156][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:36:33][356408516785156][962 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=330 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 330.502/330.502/330.502/0.000 ms\n [2025-09-06 20:36:33][356408516785156][962 ms][DEBUG] check_internet: online [2025-09-06 20:36:33][356408516785156][962 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:36:33][356408516785156][963 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356408516785156\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1389\"}'\'' -e'"" [2025-09-06 20:36:33][356408516785156][963 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:36:33][356408516785156][963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356408516785156\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1389\"}'\'' -e'"" [2025-09-06 20:36:38][356408516785156][5117 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa840ff3-4641-433c-95a8-658fc4c5bca1","id":"QR_aa840ff3-4641-433c-95a8-658fc4c5bca1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:36:38][356408516785156][5274 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-09-06 20:36:38][356408516785156][5274 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-09-06 20:36:38][356408516785156][5274 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:37:05][350181270883394][0 ms][INFO] === Request start === [2025-09-06 20:37:05][350181270883394][1 ms][DEBUG] START check_scloud [2025-09-06 20:37:05][350181270883394][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:37:05][350181270883394][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 13473 16311 24126328 173028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:37:05][350181270883394][269 ms][DEBUG] targetPkg: running [2025-09-06 20:37:05][350181270883394][269 ms][DEBUG] END check_scloud in 268 ms [2025-09-06 20:37:05][350181270883394][269 ms][DEBUG] START check_boot_completed [2025-09-06 20:37:05][350181270883394][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:37:05][350181270883394][315 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 20:37:05][350181270883394][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:37:05][350181270883394][378 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 20:37:05][350181270883394][378 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 20:37:05][350181270883394][378 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:37:05][350181270883394][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350181270883394\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9521\"}'\'' -e'"" [2025-09-06 20:37:05][350181270883394][378 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:37:05][350181270883394][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350181270883394\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9521\"}'\'' -e'"" [2025-09-06 20:37:10][350181270883394][5189 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52ceb63a-157d-452b-9eda-16cb71b4387f","id":"QR_52ceb63a-157d-452b-9eda-16cb71b4387f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:37:10][350181270883394][5345 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-09-06 20:37:10][350181270883394][5345 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-09-06 20:37:10][350181270883394][5345 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:37:14][350181270883394][0 ms][INFO] === Request start === [2025-09-06 20:37:14][350181270883394][1 ms][DEBUG] START check_scloud [2025-09-06 20:37:14][350181270883394][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:37:14][350181270883394][266 ms][DEBUG] SU: done in 266 ms; outu0_a118 13473 16311 24301632 183916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:37:14][350181270883394][267 ms][DEBUG] targetPkg: running [2025-09-06 20:37:14][350181270883394][267 ms][DEBUG] END check_scloud in 266 ms [2025-09-06 20:37:14][350181270883394][267 ms][DEBUG] START check_boot_completed [2025-09-06 20:37:14][350181270883394][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:37:14][350181270883394][313 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 20:37:14][350181270883394][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:37:14][350181270883394][361 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 20:37:14][350181270883394][361 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 20:37:14][350181270883394][361 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:37:14][350181270883394][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350181270883394\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7308\"}'\'' -e'"" [2025-09-06 20:37:14][350181270883394][362 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:37:14][350181270883394][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350181270883394\",\"model\":\"SM-A546E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7308\"}'\'' -e'"" [2025-09-06 20:37:19][350181270883394][5734 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43501bac-7981-4cde-a807-1befb472e2b3","id":"QR_43501bac-7981-4cde-a807-1befb472e2b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:37:19][350181270883394][5890 ms][DEBUG] proc_open done in 5528 ms; code=255; res.len=3343 [2025-09-06 20:37:19][350181270883394][5890 ms][DEBUG] END runCmdUntilRes#1 in 5528 ms [2025-09-06 20:37:19][350181270883394][5890 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:49:05][352672513238535][1 ms][INFO] === Request start === [2025-09-06 20:49:05][352672513238535][1 ms][DEBUG] START check_scloud [2025-09-06 20:49:05][352672513238535][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:49:05][352672513238535][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 13473 16311 24371252 190136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:49:05][352672513238535][263 ms][DEBUG] targetPkg: running [2025-09-06 20:49:05][352672513238535][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-06 20:49:05][352672513238535][263 ms][DEBUG] START check_boot_completed [2025-09-06 20:49:05][352672513238535][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:49:05][352672513238535][294 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 20:49:05][352672513238535][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:49:05][352672513238535][342 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 20:49:05][352672513238535][342 ms][DEBUG] END check_boot_completed in 79 ms [2025-09-06 20:49:05][352672513238535][343 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:49:05][352672513238535][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513238535\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3099\"}'\'' -e'"" [2025-09-06 20:49:05][352672513238535][343 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:49:05][352672513238535][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513238535\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3099\"}'\'' -e'"" [2025-09-06 20:49:11][352672513238535][6324 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73f2243d-fa73-4fd4-b7a6-582aa37626a8","id":"QR_73f2243d-fa73-4fd4-b7a6-582aa37626a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:49:11][352672513238535][6480 ms][DEBUG] proc_open done in 6138 ms; code=255; res.len=3343 [2025-09-06 20:49:11][352672513238535][6481 ms][DEBUG] END runCmdUntilRes#1 in 6138 ms [2025-09-06 20:49:11][352672513238535][6481 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:49:15][352672513238535][0 ms][INFO] === Request start === [2025-09-06 20:49:15][352672513238535][1 ms][DEBUG] START check_scloud [2025-09-06 20:49:15][352672513238535][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:49:15][352672513238535][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 13473 16311 24531272 190372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:49:15][352672513238535][287 ms][DEBUG] targetPkg: running [2025-09-06 20:49:15][352672513238535][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-06 20:49:15][352672513238535][287 ms][DEBUG] START check_boot_completed [2025-09-06 20:49:15][352672513238535][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:49:15][352672513238535][333 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 20:49:15][352672513238535][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:49:15][352672513238535][396 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 20:49:15][352672513238535][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 20:49:15][352672513238535][396 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:49:15][352672513238535][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513238535\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3237\"}'\'' -e'"" [2025-09-06 20:49:15][352672513238535][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:49:15][352672513238535][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513238535\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3237\"}'\'' -e'"" [2025-09-06 20:49:19][352672513238535][4192 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b147fa9f-b661-4633-bc47-824cf334c373","id":"QR_b147fa9f-b661-4633-bc47-824cf334c373","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:49:19][352672513238535][4348 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-06 20:49:19][352672513238535][4348 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-06 20:49:19][352672513238535][4348 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:50:04][351874535085636][0 ms][INFO] === Request start === [2025-09-06 20:50:04][351874535085636][1 ms][DEBUG] START check_scloud [2025-09-06 20:50:04][351874535085636][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:50:04][351874535085636][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 13473 16311 24643080 193840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:50:04][351874535085636][299 ms][DEBUG] targetPkg: running [2025-09-06 20:50:04][351874535085636][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 20:50:04][351874535085636][299 ms][DEBUG] START check_boot_completed [2025-09-06 20:50:04][351874535085636][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:50:04][351874535085636][345 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 20:50:04][351874535085636][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:50:05][351874535085636][408 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 20:50:05][351874535085636][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 20:50:05][351874535085636][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:50:05][351874535085636][533 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5274\nsuccessfulTxPacketsPerSecond: 0.25197216676680945\nretriedTxPackets: 1294\nretriedTxPacketsPerSecond: 0.1033731966222808\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4807\nsuccessfulRxPacketsPerSecond: 0.18736391887788395\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:50:05][351874535085636][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:50:06][351874535085636][1861 ms][DEBUG] SU: done in 1327 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.655/301.655/301.655/0.000 ms\n [2025-09-06 20:50:06][351874535085636][1861 ms][DEBUG] check_internet: online [2025-09-06 20:50:06][351874535085636][1861 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:50:06][351874535085636][1861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351874535085636\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9991\"}'\'' -e'"" [2025-09-06 20:50:06][351874535085636][1861 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:50:06][351874535085636][1861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351874535085636\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9991\"}'\'' -e'"" [2025-09-06 20:50:11][351874535085636][7219 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c0fabd9-a631-4698-b5c0-52bccc5d9b14","id":"QR_9c0fabd9-a631-4698-b5c0-52bccc5d9b14","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:50:12][351874535085636][7375 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-09-06 20:50:12][351874535085636][7375 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-09-06 20:50:12][351874535085636][7375 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:50:15][351874535085636][0 ms][INFO] === Request start === [2025-09-06 20:50:15][351874535085636][1 ms][DEBUG] START check_scloud [2025-09-06 20:50:15][351874535085636][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:50:15][351874535085636][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 13473 16311 24779412 195724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:50:15][351874535085636][324 ms][DEBUG] targetPkg: running [2025-09-06 20:50:15][351874535085636][324 ms][DEBUG] END check_scloud in 324 ms [2025-09-06 20:50:15][351874535085636][324 ms][DEBUG] START check_boot_completed [2025-09-06 20:50:15][351874535085636][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:50:16][351874535085636][371 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 20:50:16][351874535085636][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:50:16][351874535085636][433 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 20:50:16][351874535085636][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 20:50:16][351874535085636][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:50:16][351874535085636][558 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5362\nsuccessfulTxPacketsPerSecond: 0.29236754587346464\nretriedTxPackets: 1318\nretriedTxPacketsPerSecond: 0.07973660342003581\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4889\nsuccessfulRxPacketsPerSecond: 0.2724333950184557\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:50:16][351874535085636][558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:50:16][351874535085636][902 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.997/250.997/250.997/0.000 ms\n [2025-09-06 20:50:16][351874535085636][902 ms][DEBUG] check_internet: online [2025-09-06 20:50:16][351874535085636][902 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:50:16][351874535085636][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351874535085636\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9283\"}'\'' -e'"" [2025-09-06 20:50:16][351874535085636][902 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:50:16][351874535085636][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351874535085636\",\"model\":\"SM-A556E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9283\"}'\'' -e'"" [2025-09-06 20:50:20][351874535085636][4635 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f75b94f9-93aa-4153-ae78-a04db15c124e","id":"QR_f75b94f9-93aa-4153-ae78-a04db15c124e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:50:20][351874535085636][4791 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-09-06 20:50:20][351874535085636][4792 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-06 20:50:20][351874535085636][4792 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:51:03][354601551543215][0 ms][INFO] === Request start === [2025-09-06 20:51:03][354601551543215][1 ms][DEBUG] START check_scloud [2025-09-06 20:51:03][354601551543215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:51:03][354601551543215][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 13473 16311 24907604 200560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:51:03][354601551543215][309 ms][DEBUG] targetPkg: running [2025-09-06 20:51:03][354601551543215][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 20:51:03][354601551543215][309 ms][DEBUG] START check_boot_completed [2025-09-06 20:51:03][354601551543215][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:51:03][354601551543215][354 ms][DEBUG] ADB: done in 44 ms; out [2025-09-06 20:51:03][354601551543215][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:51:04][354601551543215][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:51:04][354601551543215][400 ms][DEBUG] END check_boot_completed in 91 ms [2025-09-06 20:51:04][354601551543215][400 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:51:04][354601551543215][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601551543215\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8790\"}'\'' -e'"" [2025-09-06 20:51:04][354601551543215][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:51:04][354601551543215][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601551543215\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8790\"}'\'' -e'"" [2025-09-06 20:51:08][354601551543215][4650 ms][DEBUG] proc_open done in 4249 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 20:51:08][354601551543215][4650 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-06 20:51:08][354601551543215][4650 ms][WARN] Detected error: Process with pid 13473 either refused to load frida-agent, or terminated during injectionProcess with pid 13473 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 20:51:08][354601551543215][4650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 20:51:08][354601551543215][4899 ms][DEBUG] SU: done in 249 ms; outsystem 16544 16311 13321244 230728 ep_poll 0 S system_server\n [2025-09-06 20:51:08][354601551543215][4899 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 20:51:08][354601551543215][5025 ms][DEBUG] SU: done in 126 ms; out [2025-09-06 20:51:08][354601551543215][5025 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 20:51:08][354601551543215][5025 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 20:51:08][354601551543215][5181 ms][DEBUG] SU: done in 155 ms; out [2025-09-06 20:51:08][354601551543215][5181 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 20:51:09][354601551543215][5368 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 20:51:11][354601551543215][7383 ms][DEBUG] START check_boot_completed [2025-09-06 20:51:11][354601551543215][7383 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:51:11][354601551543215][7430 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 20:51:11][354601551543215][7430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:51:11][354601551543215][7477 ms][DEBUG] SU: done in 46 ms; out [2025-09-06 20:51:11][354601551543215][7477 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 20:51:14][354601551543215][10492 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 20:51:14][354601551543215][10492 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601551543215\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8790\"}'\'' -e'"" [2025-09-06 20:51:17][354601551543215][13803 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bad8f35d-457f-48de-9e66-3c604bf74ea0","id":"QR_bad8f35d-457f-48de-9e66-3c604bf74ea0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:51:17][354601551543215][13960 ms][DEBUG] proc_open done in 3468 ms; code=255; res.len=3343 [2025-09-06 20:51:17][354601551543215][13960 ms][DEBUG] END runCmdUntilRes#2 in 3468 ms [2025-09-06 20:51:17][354601551543215][13960 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:51:20][354601551543215][1 ms][INFO] === Request start === [2025-09-06 20:51:20][354601551543215][1 ms][DEBUG] START check_scloud [2025-09-06 20:51:20][354601551543215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:51:20][354601551543215][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 15833 16311 23736544 124608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:51:20][354601551543215][244 ms][DEBUG] targetPkg: running [2025-09-06 20:51:20][354601551543215][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-06 20:51:20][354601551543215][244 ms][DEBUG] START check_boot_completed [2025-09-06 20:51:20][354601551543215][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:51:20][354601551543215][275 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 20:51:20][354601551543215][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:51:20][354601551543215][322 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:51:20][354601551543215][322 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 20:51:20][354601551543215][322 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:51:20][354601551543215][322 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601551543215\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6278\"}'\'' -e'"" [2025-09-06 20:51:20][354601551543215][322 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:51:20][354601551543215][322 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601551543215\",\"model\":\"SM-S906B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6278\"}'\'' -e'"" [2025-09-06 20:51:25][354601551543215][5868 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77595e88-cef4-4ac4-ab81-e46145b922f5","id":"QR_77595e88-cef4-4ac4-ab81-e46145b922f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:51:26][354601551543215][6024 ms][DEBUG] proc_open done in 5702 ms; code=255; res.len=3343 [2025-09-06 20:51:26][354601551543215][6024 ms][DEBUG] END runCmdUntilRes#1 in 5702 ms [2025-09-06 20:51:26][354601551543215][6024 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:54:03][350498058212434][1 ms][INFO] === Request start === [2025-09-06 20:54:03][350498058212434][1 ms][DEBUG] START check_scloud [2025-09-06 20:54:03][350498058212434][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:54:03][350498058212434][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 15833 16311 23806960 137720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:54:03][350498058212434][300 ms][DEBUG] targetPkg: running [2025-09-06 20:54:03][350498058212434][300 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 20:54:03][350498058212434][300 ms][DEBUG] START check_boot_completed [2025-09-06 20:54:03][350498058212434][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:54:03][350498058212434][331 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 20:54:03][350498058212434][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:54:03][350498058212434][378 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:54:03][350498058212434][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 20:54:03][350498058212434][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:54:03][350498058212434][518 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5362\nsuccessfulTxPacketsPerSecond: 0.29236754587346464\nretriedTxPackets: 1318\nretriedTxPacketsPerSecond: 0.07973660342003581\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4889\nsuccessfulRxPacketsPerSecond: 0.2724333950184557\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:54:03][350498058212434][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:54:05][350498058212434][1909 ms][DEBUG] SU: done in 1390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.379/299.379/299.379/0.000 ms\n [2025-09-06 20:54:05][350498058212434][1909 ms][DEBUG] check_internet: online [2025-09-06 20:54:05][350498058212434][1909 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:54:05][350498058212434][1909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498058212434\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7370\"}'\'' -e'"" [2025-09-06 20:54:05][350498058212434][1909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:54:05][350498058212434][1909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498058212434\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7370\"}'\'' -e'"" [2025-09-06 20:54:08][350498058212434][5673 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df27f075-b269-4e53-a9c5-458b07e2bc0f","id":"QR_df27f075-b269-4e53-a9c5-458b07e2bc0f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:54:09][350498058212434][5829 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-09-06 20:54:09][350498058212434][5830 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-09-06 20:54:09][350498058212434][5830 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:54:11][350498058212434][0 ms][INFO] === Request start === [2025-09-06 20:54:11][350498058212434][1 ms][DEBUG] START check_scloud [2025-09-06 20:54:11][350498058212434][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:54:11][350498058212434][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 15833 16311 23945208 149376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:54:11][350498058212434][312 ms][DEBUG] targetPkg: running [2025-09-06 20:54:11][350498058212434][312 ms][DEBUG] END check_scloud in 312 ms [2025-09-06 20:54:11][350498058212434][312 ms][DEBUG] START check_boot_completed [2025-09-06 20:54:11][350498058212434][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:54:11][350498058212434][359 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 20:54:11][350498058212434][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:54:11][350498058212434][406 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 20:54:11][350498058212434][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 20:54:11][350498058212434][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:54:12][350498058212434][515 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5362\nsuccessfulTxPacketsPerSecond: 0.29236754587346464\nretriedTxPackets: 1318\nretriedTxPacketsPerSecond: 0.07973660342003581\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4889\nsuccessfulRxPacketsPerSecond: 0.2724333950184557\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:54:12][350498058212434][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:54:12][350498058212434][890 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.558/273.558/273.558/0.000 ms\n [2025-09-06 20:54:12][350498058212434][890 ms][DEBUG] check_internet: online [2025-09-06 20:54:12][350498058212434][890 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:54:12][350498058212434][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498058212434\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7642\"}'\'' -e'"" [2025-09-06 20:54:12][350498058212434][891 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:54:12][350498058212434][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498058212434\",\"model\":\"SM-A536B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7642\"}'\'' -e'"" [2025-09-06 20:54:17][350498058212434][6154 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4051c90-cd6c-4179-b199-739c9b14a77e","id":"QR_e4051c90-cd6c-4179-b199-739c9b14a77e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:54:17][350498058212434][6310 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-09-06 20:54:17][350498058212434][6310 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-09-06 20:54:17][350498058212434][6311 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:54:23][352589407945316][0 ms][INFO] === Request start === [2025-09-06 20:54:23][352589407945316][1 ms][DEBUG] START check_scloud [2025-09-06 20:54:23][352589407945316][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:54:23][352589407945316][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 15833 16311 24088796 160320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:54:23][352589407945316][309 ms][DEBUG] targetPkg: running [2025-09-06 20:54:23][352589407945316][309 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 20:54:23][352589407945316][309 ms][DEBUG] START check_boot_completed [2025-09-06 20:54:23][352589407945316][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:54:23][352589407945316][354 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 20:54:23][352589407945316][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:54:23][352589407945316][402 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 20:54:23][352589407945316][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 20:54:23][352589407945316][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:54:23][352589407945316][526 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5362\nsuccessfulTxPacketsPerSecond: 0.29236754587346464\nretriedTxPackets: 1318\nretriedTxPacketsPerSecond: 0.07973660342003581\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4889\nsuccessfulRxPacketsPerSecond: 0.2724333950184557\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:54:23][352589407945316][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:54:24][352589407945316][948 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.927/301.927/301.927/0.000 ms\n [2025-09-06 20:54:24][352589407945316][948 ms][DEBUG] check_internet: online [2025-09-06 20:54:24][352589407945316][948 ms][DEBUG] rawBody.length=1160 [2025-09-06 20:54:24][352589407945316][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589407945316\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7998\"}'\'' -e'"" [2025-09-06 20:54:24][352589407945316][948 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:54:24][352589407945316][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589407945316\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7998\"}'\'' -e'"" [2025-09-06 20:54:29][352589407945316][6197 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf0be57a-2fc2-4c6b-872f-ec7c567b4794","id":"QR_cf0be57a-2fc2-4c6b-872f-ec7c567b4794","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:54:29][352589407945316][6353 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-09-06 20:54:29][352589407945316][6353 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-09-06 20:54:29][352589407945316][6353 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 20:54:33][352589407945316][0 ms][INFO] === Request start === [2025-09-06 20:54:33][352589407945316][1 ms][DEBUG] START check_scloud [2025-09-06 20:54:33][352589407945316][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 20:54:33][352589407945316][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 15833 16311 24221980 171328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 20:54:33][352589407945316][305 ms][DEBUG] targetPkg: running [2025-09-06 20:54:33][352589407945316][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 20:54:33][352589407945316][305 ms][DEBUG] START check_boot_completed [2025-09-06 20:54:33][352589407945316][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 20:54:33][352589407945316][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 20:54:33][352589407945316][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 20:54:33][352589407945316][414 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 20:54:33][352589407945316][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 20:54:33][352589407945316][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 20:54:33][352589407945316][539 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5362\nsuccessfulTxPacketsPerSecond: 0.29236754587346464\nretriedTxPackets: 1318\nretriedTxPacketsPerSecond: 0.07973660342003581\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4889\nsuccessfulRxPacketsPerSecond: 0.2724333950184557\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 20:54:33][352589407945316][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 20:54:33][352589407945316][945 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.024/300.024/300.024/0.000 ms\n [2025-09-06 20:54:33][352589407945316][945 ms][DEBUG] check_internet: online [2025-09-06 20:54:33][352589407945316][945 ms][DEBUG] rawBody.length=1150 [2025-09-06 20:54:33][352589407945316][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589407945316\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1369\"}'\'' -e'"" [2025-09-06 20:54:33][352589407945316][945 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 20:54:33][352589407945316][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589407945316\",\"model\":\"SM-A536E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1369\"}'\'' -e'"" [2025-09-06 20:54:37][352589407945316][4569 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a743fcbd-db1f-41b4-a795-3fd70f96c389","id":"QR_a743fcbd-db1f-41b4-a795-3fd70f96c389","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 20:54:37][352589407945316][4726 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-09-06 20:54:37][352589407945316][4726 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-09-06 20:54:37][352589407945316][4726 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:00:05][353607434549502][1 ms][INFO] === Request start === [2025-09-06 21:00:05][353607434549502][1 ms][DEBUG] START check_scloud [2025-09-06 21:00:05][353607434549502][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:00:05][353607434549502][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 15833 16311 24319388 184344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:00:05][353607434549502][287 ms][DEBUG] targetPkg: running [2025-09-06 21:00:05][353607434549502][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-06 21:00:05][353607434549502][287 ms][DEBUG] START check_boot_completed [2025-09-06 21:00:05][353607434549502][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:00:05][353607434549502][318 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 21:00:05][353607434549502][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:00:05][353607434549502][381 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 21:00:05][353607434549502][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 21:00:05][353607434549502][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:00:05][353607434549502][506 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5570\nsuccessfulTxPacketsPerSecond: 0.07602981269737158\nretriedTxPackets: 1391\nretriedTxPacketsPerSecond: 0.06335817724780965\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5058\nsuccessfulRxPacketsPerSecond: 0.02534327089912386\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:00:05][353607434549502][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:00:06][353607434549502][1381 ms][DEBUG] SU: done in 874 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=409 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 409.679/409.679/409.679/0.000 ms\n [2025-09-06 21:00:06][353607434549502][1381 ms][DEBUG] check_internet: online [2025-09-06 21:00:06][353607434549502][1381 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:00:06][353607434549502][1381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607434549502\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4896\"}'\'' -e'"" [2025-09-06 21:00:06][353607434549502][1381 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:00:06][353607434549502][1381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607434549502\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4896\"}'\'' -e'"" [2025-09-06 21:00:11][353607434549502][6426 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9b36564-5102-43d4-8508-1a43cc9d5b9d","id":"QR_e9b36564-5102-43d4-8508-1a43cc9d5b9d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:00:11][353607434549502][6582 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-09-06 21:00:11][353607434549502][6583 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-09-06 21:00:11][353607434549502][6583 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:00:15][353607434549502][0 ms][INFO] === Request start === [2025-09-06 21:00:15][353607434549502][1 ms][DEBUG] START check_scloud [2025-09-06 21:00:15][353607434549502][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:00:15][353607434549502][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 15833 16311 24492196 195504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:00:15][353607434549502][295 ms][DEBUG] targetPkg: running [2025-09-06 21:00:15][353607434549502][295 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 21:00:15][353607434549502][295 ms][DEBUG] START check_boot_completed [2025-09-06 21:00:15][353607434549502][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:00:15][353607434549502][341 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:00:15][353607434549502][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:00:15][353607434549502][419 ms][DEBUG] SU: done in 78 ms; out [2025-09-06 21:00:15][353607434549502][419 ms][DEBUG] END check_boot_completed in 124 ms [2025-09-06 21:00:15][353607434549502][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:00:16][353607434549502][544 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5570\nsuccessfulTxPacketsPerSecond: 0.07602981269737158\nretriedTxPackets: 1391\nretriedTxPacketsPerSecond: 0.06335817724780965\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5058\nsuccessfulRxPacketsPerSecond: 0.02534327089912386\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:00:16][353607434549502][544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:00:16][353607434549502][903 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.711/274.711/274.711/0.000 ms\n [2025-09-06 21:00:16][353607434549502][903 ms][DEBUG] check_internet: online [2025-09-06 21:00:16][353607434549502][903 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:00:16][353607434549502][903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607434549502\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5543\"}'\'' -e'"" [2025-09-06 21:00:16][353607434549502][903 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:00:16][353607434549502][903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607434549502\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5543\"}'\'' -e'"" [2025-09-06 21:00:20][353607434549502][4793 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_966d474a-bfba-4f22-bdae-45c89cbf08d9","id":"QR_966d474a-bfba-4f22-bdae-45c89cbf08d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:00:20][353607434549502][4949 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-09-06 21:00:20][353607434549502][4949 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-09-06 21:00:20][353607434549502][4949 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:05:03][355358710650584][0 ms][INFO] === Request start === [2025-09-06 21:05:03][355358710650584][0 ms][DEBUG] START check_scloud [2025-09-06 21:05:03][355358710650584][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:05:03][355358710650584][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 15833 16311 24605988 206948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:05:03][355358710650584][316 ms][DEBUG] targetPkg: running [2025-09-06 21:05:03][355358710650584][316 ms][DEBUG] END check_scloud in 316 ms [2025-09-06 21:05:03][355358710650584][316 ms][DEBUG] START check_boot_completed [2025-09-06 21:05:03][355358710650584][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:05:03][355358710650584][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:05:03][355358710650584][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:05:03][355358710650584][425 ms][DEBUG] SU: done in 63 ms; out [2025-09-06 21:05:03][355358710650584][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 21:05:03][355358710650584][425 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:05:03][355358710650584][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355358710650584\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1756\"}'\'' -e'"" [2025-09-06 21:05:03][355358710650584][425 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:05:03][355358710650584][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355358710650584\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1756\"}'\'' -e'"" [2025-09-06 21:05:09][355358710650584][5548 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f3f4d9f-92e2-4ebe-aa67-aa108e53f84a","id":"QR_1f3f4d9f-92e2-4ebe-aa67-aa108e53f84a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:05:09][355358710650584][5705 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-09-06 21:05:09][355358710650584][5705 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-09-06 21:05:09][355358710650584][5705 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:05:11][355358710650584][0 ms][INFO] === Request start === [2025-09-06 21:05:11][355358710650584][1 ms][DEBUG] START check_scloud [2025-09-06 21:05:11][355358710650584][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:05:11][355358710650584][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 15833 16311 24781228 218808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:05:11][355358710650584][307 ms][DEBUG] targetPkg: running [2025-09-06 21:05:11][355358710650584][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 21:05:11][355358710650584][307 ms][DEBUG] START check_boot_completed [2025-09-06 21:05:11][355358710650584][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:05:11][355358710650584][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:05:11][355358710650584][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:05:12][355358710650584][401 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 21:05:12][355358710650584][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 21:05:12][355358710650584][402 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:05:12][355358710650584][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355358710650584\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6610\"}'\'' -e'"" [2025-09-06 21:05:12][355358710650584][402 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:05:12][355358710650584][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355358710650584\",\"model\":\"SM-S928B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6610\"}'\'' -e'"" [2025-09-06 21:05:16][355358710650584][5274 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afce8ba5-2be9-409d-b12b-683b731ccf01","id":"QR_afce8ba5-2be9-409d-b12b-683b731ccf01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:05:17][355358710650584][5430 ms][DEBUG] proc_open done in 5028 ms; code=255; res.len=3343 [2025-09-06 21:05:17][355358710650584][5430 ms][DEBUG] END runCmdUntilRes#1 in 5029 ms [2025-09-06 21:05:17][355358710650584][5431 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:07:04][350209362089222][1 ms][INFO] === Request start === [2025-09-06 21:07:04][350209362089222][1 ms][DEBUG] START check_scloud [2025-09-06 21:07:04][350209362089222][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:07:04][350209362089222][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 15833 16311 24899052 229808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:07:04][350209362089222][314 ms][DEBUG] targetPkg: running [2025-09-06 21:07:04][350209362089222][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 21:07:04][350209362089222][314 ms][DEBUG] START check_boot_completed [2025-09-06 21:07:04][350209362089222][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:07:04][350209362089222][361 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:07:04][350209362089222][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:07:04][350209362089222][408 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:07:04][350209362089222][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 21:07:04][350209362089222][408 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:07:04][350209362089222][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350209362089222\",\"model\":\"SM-S918W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4485\"}'\'' -e'"" [2025-09-06 21:07:04][350209362089222][408 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:07:04][350209362089222][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350209362089222\",\"model\":\"SM-S918W\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4485\"}'\'' -e'"" [2025-09-06 21:07:10][350209362089222][6234 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a00503b9-fbd6-42ea-962b-3988ed6ccfb5","id":"QR_a00503b9-fbd6-42ea-962b-3988ed6ccfb5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:07:10][350209362089222][6391 ms][DEBUG] proc_open done in 5983 ms; code=255; res.len=3343 [2025-09-06 21:07:10][350209362089222][6391 ms][DEBUG] END runCmdUntilRes#1 in 5983 ms [2025-09-06 21:07:10][350209362089222][6391 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:07:14][350209362089222][0 ms][INFO] === Request start === [2025-09-06 21:07:14][350209362089222][1 ms][DEBUG] START check_scloud [2025-09-06 21:07:14][350209362089222][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:07:14][350209362089222][286 ms][DEBUG] SU: done in 286 ms; outu0_a118 15833 16311 25045684 241500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:07:14][350209362089222][286 ms][DEBUG] targetPkg: running [2025-09-06 21:07:14][350209362089222][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-06 21:07:14][350209362089222][287 ms][DEBUG] START check_boot_completed [2025-09-06 21:07:14][350209362089222][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:07:14][350209362089222][333 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:07:14][350209362089222][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:07:14][350209362089222][396 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 21:07:14][350209362089222][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 21:07:14][350209362089222][396 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:07:14][350209362089222][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350209362089222\",\"model\":\"SM-S918W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4272\"}'\'' -e'"" [2025-09-06 21:07:14][350209362089222][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:07:14][350209362089222][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350209362089222\",\"model\":\"SM-S918W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4272\"}'\'' -e'"" [2025-09-06 21:07:18][350209362089222][4567 ms][DEBUG] proc_open done in 4170 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 21:07:18][350209362089222][4567 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-09-06 21:07:18][350209362089222][4567 ms][WARN] Detected error: Process with pid 15833 either refused to load frida-agent, or terminated during injectionProcess with pid 15833 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 21:07:18][350209362089222][4567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 21:07:19][350209362089222][4816 ms][DEBUG] SU: done in 249 ms; outsystem 16544 16311 13119164 208768 ep_poll 0 S system_server\n [2025-09-06 21:07:19][350209362089222][4816 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 21:07:19][350209362089222][4941 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 21:07:19][350209362089222][4942 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 21:07:19][350209362089222][4942 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 21:07:19][350209362089222][5068 ms][DEBUG] SU: done in 126 ms; out [2025-09-06 21:07:19][350209362089222][5068 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 21:07:19][350209362089222][5223 ms][DEBUG] SU: done in 155 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 21:07:21][350209362089222][7238 ms][DEBUG] START check_boot_completed [2025-09-06 21:07:21][350209362089222][7238 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:07:21][350209362089222][7285 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 21:07:21][350209362089222][7285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:07:21][350209362089222][7331 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:07:21][350209362089222][7331 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 21:07:24][350209362089222][10346 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 21:07:24][350209362089222][10346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350209362089222\",\"model\":\"SM-S918W\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4272\"}'\'' -e'"" [2025-09-06 21:07:28][350209362089222][14252 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_300a1a50-c721-4af2-afcb-6e5cad443b5e","id":"QR_300a1a50-c721-4af2-afcb-6e5cad443b5e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:07:28][350209362089222][14408 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-09-06 21:07:28][350209362089222][14408 ms][DEBUG] END runCmdUntilRes#2 in 4062 ms [2025-09-06 21:07:28][350209362089222][14408 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:09:04][358835963153900][0 ms][INFO] === Request start === [2025-09-06 21:09:04][358835963153900][1 ms][DEBUG] START check_scloud [2025-09-06 21:09:04][358835963153900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:09:04][358835963153900][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 19246 16311 23580472 126848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:09:04][358835963153900][260 ms][DEBUG] targetPkg: running [2025-09-06 21:09:04][358835963153900][260 ms][DEBUG] END check_scloud in 259 ms [2025-09-06 21:09:04][358835963153900][260 ms][DEBUG] START check_boot_completed [2025-09-06 21:09:04][358835963153900][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:09:04][358835963153900][304 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 21:09:04][358835963153900][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:09:04][358835963153900][367 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 21:09:04][358835963153900][367 ms][DEBUG] END check_boot_completed in 107 ms [2025-09-06 21:09:04][358835963153900][367 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:09:04][358835963153900][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358835963153900\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6569\"}'\'' -e'"" [2025-09-06 21:09:04][358835963153900][367 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:09:04][358835963153900][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358835963153900\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6569\"}'\'' -e'"" [2025-09-06 21:09:10][358835963153900][6084 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ce47927-75e1-4b01-a484-2a062947e293","id":"QR_6ce47927-75e1-4b01-a484-2a062947e293","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:09:10][358835963153900][6240 ms][DEBUG] proc_open done in 5873 ms; code=255; res.len=3343 [2025-09-06 21:09:10][358835963153900][6240 ms][DEBUG] END runCmdUntilRes#1 in 5873 ms [2025-09-06 21:09:10][358835963153900][6240 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:09:14][358835963153900][1 ms][INFO] === Request start === [2025-09-06 21:09:14][358835963153900][1 ms][DEBUG] START check_scloud [2025-09-06 21:09:14][358835963153900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:09:14][358835963153900][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 19246 16311 23749312 137492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:09:14][358835963153900][299 ms][DEBUG] targetPkg: running [2025-09-06 21:09:14][358835963153900][299 ms][DEBUG] END check_scloud in 298 ms [2025-09-06 21:09:14][358835963153900][299 ms][DEBUG] START check_boot_completed [2025-09-06 21:09:14][358835963153900][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:09:14][358835963153900][346 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:09:14][358835963153900][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:09:14][358835963153900][394 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 21:09:14][358835963153900][394 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 21:09:14][358835963153900][394 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:09:14][358835963153900][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358835963153900\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9685\"}'\'' -e'"" [2025-09-06 21:09:14][358835963153900][395 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:09:14][358835963153900][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358835963153900\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9685\"}'\'' -e'"" [2025-09-06 21:09:19][358835963153900][5079 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9dcb4de-c933-4a13-bdf2-9b466ab9aef2","id":"QR_c9dcb4de-c933-4a13-bdf2-9b466ab9aef2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:09:19][358835963153900][5235 ms][DEBUG] proc_open done in 4840 ms; code=255; res.len=3343 [2025-09-06 21:09:19][358835963153900][5235 ms][DEBUG] END runCmdUntilRes#1 in 4840 ms [2025-09-06 21:09:19][358835963153900][5235 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:13:04][352967353888294][1 ms][INFO] === Request start === [2025-09-06 21:13:04][352967353888294][1 ms][DEBUG] START check_scloud [2025-09-06 21:13:04][352967353888294][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:13:05][352967353888294][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 19246 16311 23848144 150060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:13:05][352967353888294][305 ms][DEBUG] targetPkg: running [2025-09-06 21:13:05][352967353888294][305 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 21:13:05][352967353888294][305 ms][DEBUG] START check_boot_completed [2025-09-06 21:13:05][352967353888294][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:13:05][352967353888294][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 21:13:05][352967353888294][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:13:05][352967353888294][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:13:05][352967353888294][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 21:13:05][352967353888294][383 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:13:05][352967353888294][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353888294\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1492\"}'\'' -e'"" [2025-09-06 21:13:05][352967353888294][383 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:13:05][352967353888294][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353888294\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1492\"}'\'' -e'"" [2025-09-06 21:13:11][352967353888294][6272 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a6bf47aa-2750-460b-b596-827516d8a139","id":"QR_a6bf47aa-2750-460b-b596-827516d8a139","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:13:11][352967353888294][6428 ms][DEBUG] proc_open done in 6045 ms; code=255; res.len=3343 [2025-09-06 21:13:11][352967353888294][6428 ms][DEBUG] END runCmdUntilRes#1 in 6045 ms [2025-09-06 21:13:11][352967353888294][6428 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:13:14][352967353888294][0 ms][INFO] === Request start === [2025-09-06 21:13:14][352967353888294][1 ms][DEBUG] START check_scloud [2025-09-06 21:13:14][352967353888294][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:13:15][352967353888294][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 19246 16311 24017368 161328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:13:15][352967353888294][257 ms][DEBUG] targetPkg: running [2025-09-06 21:13:15][352967353888294][258 ms][DEBUG] END check_scloud in 257 ms [2025-09-06 21:13:15][352967353888294][258 ms][DEBUG] START check_boot_completed [2025-09-06 21:13:15][352967353888294][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:13:15][352967353888294][304 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:13:15][352967353888294][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:13:15][352967353888294][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:13:15][352967353888294][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 21:13:15][352967353888294][351 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:13:15][352967353888294][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353888294\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4633\"}'\'' -e'"" [2025-09-06 21:13:15][352967353888294][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:13:15][352967353888294][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967353888294\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4633\"}'\'' -e'"" [2025-09-06 21:13:18][352967353888294][4006 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f08160a9-7557-4b04-955c-e3c8de7a6283","id":"QR_f08160a9-7557-4b04-955c-e3c8de7a6283","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:13:19][352967353888294][4162 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-06 21:13:19][352967353888294][4163 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-09-06 21:13:19][352967353888294][4163 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:17:03][359118661708419][1 ms][INFO] === Request start === [2025-09-06 21:17:03][359118661708419][1 ms][DEBUG] START check_scloud [2025-09-06 21:17:03][359118661708419][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:17:03][359118661708419][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 19246 16311 24179320 172348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:17:03][359118661708419][301 ms][DEBUG] targetPkg: running [2025-09-06 21:17:03][359118661708419][301 ms][DEBUG] END check_scloud in 300 ms [2025-09-06 21:17:03][359118661708419][301 ms][DEBUG] START check_boot_completed [2025-09-06 21:17:03][359118661708419][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:17:03][359118661708419][332 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 21:17:03][359118661708419][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:17:03][359118661708419][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:17:03][359118661708419][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 21:17:03][359118661708419][379 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:17:03][359118661708419][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118661708419\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5455\"}'\'' -e'"" [2025-09-06 21:17:03][359118661708419][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:17:03][359118661708419][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118661708419\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5455\"}'\'' -e'"" [2025-09-06 21:17:08][359118661708419][5159 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3179eb4-f827-45ce-b8c8-a0beb45b09df","id":"QR_f3179eb4-f827-45ce-b8c8-a0beb45b09df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:17:08][359118661708419][5315 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-09-06 21:17:08][359118661708419][5315 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-09-06 21:17:08][359118661708419][5315 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:17:11][359118661708419][0 ms][INFO] === Request start === [2025-09-06 21:17:11][359118661708419][1 ms][DEBUG] START check_scloud [2025-09-06 21:17:11][359118661708419][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:17:11][359118661708419][323 ms][DEBUG] SU: done in 323 ms; outu0_a118 19246 16311 24360704 184292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:17:11][359118661708419][323 ms][DEBUG] targetPkg: running [2025-09-06 21:17:11][359118661708419][324 ms][DEBUG] END check_scloud in 323 ms [2025-09-06 21:17:11][359118661708419][324 ms][DEBUG] START check_boot_completed [2025-09-06 21:17:11][359118661708419][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:17:11][359118661708419][370 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 21:17:11][359118661708419][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:17:11][359118661708419][433 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 21:17:11][359118661708419][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 21:17:11][359118661708419][433 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:17:11][359118661708419][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118661708419\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6602\"}'\'' -e'"" [2025-09-06 21:17:11][359118661708419][433 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:17:11][359118661708419][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118661708419\",\"model\":\"SM-A047F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6602\"}'\'' -e'"" [2025-09-06 21:17:16][359118661708419][5541 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23c43a4c-108a-41b8-903c-f3a57bd0e2aa","id":"QR_23c43a4c-108a-41b8-903c-f3a57bd0e2aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:17:16][359118661708419][5697 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-09-06 21:17:16][359118661708419][5697 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-09-06 21:17:16][359118661708419][5697 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:28:03][357211243716331][1 ms][INFO] === Request start === [2025-09-06 21:28:03][357211243716331][1 ms][DEBUG] START check_scloud [2025-09-06 21:28:03][357211243716331][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:28:03][357211243716331][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 19246 16311 24435628 195416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:28:03][357211243716331][310 ms][DEBUG] targetPkg: running [2025-09-06 21:28:03][357211243716331][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 21:28:03][357211243716331][310 ms][DEBUG] START check_boot_completed [2025-09-06 21:28:03][357211243716331][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:28:03][357211243716331][356 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:28:03][357211243716331][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:28:03][357211243716331][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:28:03][357211243716331][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 21:28:03][357211243716331][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:28:04][357211243716331][513 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6078\nsuccessfulTxPacketsPerSecond: 3.89336936992183E-13\nretriedTxPackets: 1554\nretriedTxPacketsPerSecond: 3.89336936992183E-13\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5508\nsuccessfulRxPacketsPerSecond: 2.477598689950255E-13\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:28:04][357211243716331][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:28:05][357211243716331][1856 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=305 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 305.499/305.499/305.499/0.000 ms\n [2025-09-06 21:28:05][357211243716331][1856 ms][DEBUG] check_internet: online [2025-09-06 21:28:05][357211243716331][1856 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:28:05][357211243716331][1856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211243716331\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6385\"}'\'' -e'"" [2025-09-06 21:28:05][357211243716331][1856 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:28:05][357211243716331][1856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211243716331\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6385\"}'\'' -e'"" [2025-09-06 21:28:09][357211243716331][5886 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03ad7b01-2858-41fb-8ac3-e7fc03a7d4f4","id":"QR_03ad7b01-2858-41fb-8ac3-e7fc03a7d4f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:28:09][357211243716331][6042 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-06 21:28:09][357211243716331][6042 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-06 21:28:09][357211243716331][6042 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:28:11][357211243716331][0 ms][INFO] === Request start === [2025-09-06 21:28:11][357211243716331][1 ms][DEBUG] START check_scloud [2025-09-06 21:28:11][357211243716331][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:28:12][357211243716331][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 19246 16311 24587520 207280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:28:12][357211243716331][282 ms][DEBUG] targetPkg: running [2025-09-06 21:28:12][357211243716331][282 ms][DEBUG] END check_scloud in 281 ms [2025-09-06 21:28:12][357211243716331][282 ms][DEBUG] START check_boot_completed [2025-09-06 21:28:12][357211243716331][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:28:12][357211243716331][313 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 21:28:12][357211243716331][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:28:12][357211243716331][375 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 21:28:12][357211243716331][375 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 21:28:12][357211243716331][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:28:12][357211243716331][500 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6078\nsuccessfulTxPacketsPerSecond: 3.89336936992183E-13\nretriedTxPackets: 1554\nretriedTxPacketsPerSecond: 3.89336936992183E-13\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5508\nsuccessfulRxPacketsPerSecond: 2.477598689950255E-13\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:28:12][357211243716331][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:28:12][357211243716331][922 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=326 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 326.451/326.451/326.451/0.000 ms\n [2025-09-06 21:28:12][357211243716331][922 ms][DEBUG] check_internet: online [2025-09-06 21:28:12][357211243716331][922 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:28:12][357211243716331][922 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211243716331\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2995\"}'\'' -e'"" [2025-09-06 21:28:12][357211243716331][922 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:28:12][357211243716331][922 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211243716331\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2995\"}'\'' -e'"" [2025-09-06 21:28:17][357211243716331][5968 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d5fab18-d19a-4795-a2fd-0cd8a9701a7d","id":"QR_8d5fab18-d19a-4795-a2fd-0cd8a9701a7d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:28:18][357211243716331][6124 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-06 21:28:18][357211243716331][6124 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-06 21:28:18][357211243716331][6124 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:30:05][352283232065900][1 ms][INFO] === Request start === [2025-09-06 21:30:05][352283232065900][1 ms][DEBUG] START check_scloud [2025-09-06 21:30:05][352283232065900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:30:05][352283232065900][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 19246 16311 24728000 218460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:30:05][352283232065900][307 ms][DEBUG] targetPkg: running [2025-09-06 21:30:05][352283232065900][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 21:30:05][352283232065900][307 ms][DEBUG] START check_boot_completed [2025-09-06 21:30:05][352283232065900][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:30:05][352283232065900][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:30:05][352283232065900][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:30:05][352283232065900][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:30:05][352283232065900][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 21:30:05][352283232065900][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:30:05][352283232065900][557 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6078\nsuccessfulTxPacketsPerSecond: 3.89336936992183E-13\nretriedTxPackets: 1554\nretriedTxPacketsPerSecond: 3.89336936992183E-13\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5508\nsuccessfulRxPacketsPerSecond: 2.477598689950255E-13\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:30:05][352283232065900][557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:30:06][352283232065900][1025 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=332 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 332.314/332.314/332.314/0.000 ms\n [2025-09-06 21:30:06][352283232065900][1025 ms][DEBUG] check_internet: online [2025-09-06 21:30:06][352283232065900][1025 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:30:06][352283232065900][1026 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352283232065900\",\"model\":\"SM-A236M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9423\"}'\'' -e'"" [2025-09-06 21:30:06][352283232065900][1026 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:30:06][352283232065900][1026 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352283232065900\",\"model\":\"SM-A236M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9423\"}'\'' -e'"" [2025-09-06 21:30:12][352283232065900][6805 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78f0513d-8a0b-4363-9521-737145fcfe95","id":"QR_78f0513d-8a0b-4363-9521-737145fcfe95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:30:12][352283232065900][6962 ms][DEBUG] proc_open done in 5936 ms; code=255; res.len=3343 [2025-09-06 21:30:12][352283232065900][6962 ms][DEBUG] END runCmdUntilRes#1 in 5936 ms [2025-09-06 21:30:12][352283232065900][6962 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:30:15][352283232065900][0 ms][INFO] === Request start === [2025-09-06 21:30:15][352283232065900][1 ms][DEBUG] START check_scloud [2025-09-06 21:30:15][352283232065900][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:30:16][352283232065900][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 19246 16311 24868552 229932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:30:16][352283232065900][280 ms][DEBUG] targetPkg: running [2025-09-06 21:30:16][352283232065900][280 ms][DEBUG] END check_scloud in 279 ms [2025-09-06 21:30:16][352283232065900][280 ms][DEBUG] START check_boot_completed [2025-09-06 21:30:16][352283232065900][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:30:16][352283232065900][326 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:30:16][352283232065900][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:30:16][352283232065900][373 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:30:16][352283232065900][373 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 21:30:16][352283232065900][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:30:16][352283232065900][483 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6078\nsuccessfulTxPacketsPerSecond: 3.89336936992183E-13\nretriedTxPackets: 1554\nretriedTxPacketsPerSecond: 3.89336936992183E-13\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5508\nsuccessfulRxPacketsPerSecond: 2.477598689950255E-13\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:30:16][352283232065900][483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:30:16][352283232065900][920 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=321 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 321.160/321.160/321.160/0.000 ms\n [2025-09-06 21:30:16][352283232065900][920 ms][DEBUG] check_internet: online [2025-09-06 21:30:16][352283232065900][920 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:30:16][352283232065900][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352283232065900\",\"model\":\"SM-A236M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7014\"}'\'' -e'"" [2025-09-06 21:30:16][352283232065900][920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:30:16][352283232065900][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352283232065900\",\"model\":\"SM-A236M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7014\"}'\'' -e'"" [2025-09-06 21:30:20][352283232065900][4560 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f64dfe4-39e5-4671-aac7-496d44e85ac8","id":"QR_0f64dfe4-39e5-4671-aac7-496d44e85ac8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:30:20][352283232065900][4716 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-09-06 21:30:20][352283232065900][4716 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-09-06 21:30:20][352283232065900][4716 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:33:04][350262400774172][1 ms][INFO] === Request start === [2025-09-06 21:33:04][350262400774172][1 ms][DEBUG] START check_scloud [2025-09-06 21:33:04][350262400774172][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:33:04][350262400774172][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 19246 16311 25016904 239604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:33:04][350262400774172][302 ms][DEBUG] targetPkg: running [2025-09-06 21:33:04][350262400774172][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 21:33:04][350262400774172][302 ms][DEBUG] START check_boot_completed [2025-09-06 21:33:04][350262400774172][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:33:04][350262400774172][349 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:33:04][350262400774172][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:33:04][350262400774172][396 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:33:04][350262400774172][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 21:33:04][350262400774172][396 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:33:04][350262400774172][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350262400774172\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5683\"}'\'' -e'"" [2025-09-06 21:33:04][350262400774172][396 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:33:04][350262400774172][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350262400774172\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5683\"}'\'' -e'"" [2025-09-06 21:33:09][350262400774172][4488 ms][DEBUG] proc_open done in 4092 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 21:33:09][350262400774172][4488 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-09-06 21:33:09][350262400774172][4488 ms][WARN] Detected error: Process with pid 19246 either refused to load frida-agent, or terminated during injectionProcess with pid 19246 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 21:33:09][350262400774172][4488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 21:33:09][350262400774172][4738 ms][DEBUG] SU: done in 250 ms; outsystem 16544 16311 13270260 211208 ep_poll 0 S system_server\n [2025-09-06 21:33:09][350262400774172][4739 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 21:33:09][350262400774172][4879 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 21:33:09][350262400774172][4879 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 21:33:09][350262400774172][4879 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 21:33:09][350262400774172][5004 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 21:33:09][350262400774172][5004 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 21:33:09][350262400774172][5192 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 21:33:11][350262400774172][7206 ms][DEBUG] START check_boot_completed [2025-09-06 21:33:11][350262400774172][7207 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:33:11][350262400774172][7253 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 21:33:11][350262400774172][7253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:33:11][350262400774172][7300 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:33:11][350262400774172][7300 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 21:33:14][350262400774172][10315 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 21:33:14][350262400774172][10315 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350262400774172\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5683\"}'\'' -e'"" [2025-09-06 21:33:20][350262400774172][16095 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1752390-294d-4cb5-b3f5-4b1377341709","id":"QR_a1752390-294d-4cb5-b3f5-4b1377341709","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:33:20][350262400774172][16251 ms][DEBUG] proc_open done in 5936 ms; code=255; res.len=3343 [2025-09-06 21:33:20][350262400774172][16251 ms][DEBUG] END runCmdUntilRes#2 in 5936 ms [2025-09-06 21:33:20][350262400774172][16251 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:33:24][350262400774172][0 ms][INFO] === Request start === [2025-09-06 21:33:24][350262400774172][1 ms][DEBUG] START check_scloud [2025-09-06 21:33:24][350262400774172][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:33:24][350262400774172][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 21257 16311 23715552 124104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:33:24][350262400774172][247 ms][DEBUG] targetPkg: running [2025-09-06 21:33:24][350262400774172][247 ms][DEBUG] END check_scloud in 247 ms [2025-09-06 21:33:24][350262400774172][247 ms][DEBUG] START check_boot_completed [2025-09-06 21:33:24][350262400774172][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:33:24][350262400774172][325 ms][DEBUG] ADB: done in 78 ms; out [2025-09-06 21:33:24][350262400774172][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:33:24][350262400774172][388 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 21:33:24][350262400774172][388 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 21:33:24][350262400774172][388 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:33:24][350262400774172][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350262400774172\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6958\"}'\'' -e'"" [2025-09-06 21:33:24][350262400774172][388 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:33:24][350262400774172][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350262400774172\",\"model\":\"SM-M236B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6958\"}'\'' -e'"" [2025-09-06 21:33:28][350262400774172][4058 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_990bd8fb-c421-4c88-b524-c7d29a6f46b3","id":"QR_990bd8fb-c421-4c88-b524-c7d29a6f46b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:33:28][350262400774172][4215 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-09-06 21:33:28][350262400774172][4215 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-09-06 21:33:28][350262400774172][4215 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:38:04][350547660083797][1 ms][INFO] === Request start === [2025-09-06 21:38:04][350547660083797][1 ms][DEBUG] START check_scloud [2025-09-06 21:38:04][350547660083797][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:38:04][350547660083797][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 21257 16311 23760332 137616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:38:04][350547660083797][306 ms][DEBUG] targetPkg: running [2025-09-06 21:38:04][350547660083797][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 21:38:04][350547660083797][306 ms][DEBUG] START check_boot_completed [2025-09-06 21:38:04][350547660083797][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:38:04][350547660083797][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:38:04][350547660083797][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:38:04][350547660083797][399 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:38:04][350547660083797][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 21:38:04][350547660083797][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:38:04][350547660083797][508 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6309\nsuccessfulTxPacketsPerSecond: 0.3125374047425889\nretriedTxPackets: 1628\nretriedTxPacketsPerSecond: 0.10307084624489633\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5712\nsuccessfulRxPacketsPerSecond: 0.2726390126477903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:38:04][350547660083797][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:38:06][350547660083797][1836 ms][DEBUG] SU: done in 1328 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.956/299.956/299.956/0.000 ms\n [2025-09-06 21:38:06][350547660083797][1836 ms][DEBUG] check_internet: online [2025-09-06 21:38:06][350547660083797][1836 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:38:06][350547660083797][1837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547660083797\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6614\"}'\'' -e'"" [2025-09-06 21:38:06][350547660083797][1837 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:38:06][350547660083797][1837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547660083797\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6614\"}'\'' -e'"" [2025-09-06 21:38:10][350547660083797][6210 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8da4e7a-f635-4487-ab24-dc2ac5069763","id":"QR_a8da4e7a-f635-4487-ab24-dc2ac5069763","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:38:10][350547660083797][6366 ms][DEBUG] proc_open done in 4529 ms; code=255; res.len=3343 [2025-09-06 21:38:10][350547660083797][6366 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-09-06 21:38:10][350547660083797][6366 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:38:14][350547660083797][0 ms][INFO] === Request start === [2025-09-06 21:38:14][350547660083797][1 ms][DEBUG] START check_scloud [2025-09-06 21:38:14][350547660083797][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:38:14][350547660083797][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 21257 16311 23925268 149248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:38:14][350547660083797][263 ms][DEBUG] targetPkg: running [2025-09-06 21:38:14][350547660083797][263 ms][DEBUG] END check_scloud in 262 ms [2025-09-06 21:38:14][350547660083797][263 ms][DEBUG] START check_boot_completed [2025-09-06 21:38:14][350547660083797][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:38:14][350547660083797][309 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:38:14][350547660083797][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:38:14][350547660083797][356 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:38:14][350547660083797][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 21:38:14][350547660083797][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:38:14][350547660083797][450 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6309\nsuccessfulTxPacketsPerSecond: 0.3125374047425889\nretriedTxPackets: 1628\nretriedTxPacketsPerSecond: 0.10307084624489633\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5712\nsuccessfulRxPacketsPerSecond: 0.2726390126477903\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:38:14][350547660083797][450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:38:15][350547660083797][856 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=312 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 312.414/312.414/312.414/0.000 ms\n [2025-09-06 21:38:15][350547660083797][856 ms][DEBUG] check_internet: online [2025-09-06 21:38:15][350547660083797][856 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:38:15][350547660083797][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547660083797\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4986\"}'\'' -e'"" [2025-09-06 21:38:15][350547660083797][857 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:38:15][350547660083797][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547660083797\",\"model\":\"SM-A225M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4986\"}'\'' -e'"" [2025-09-06 21:38:18][350547660083797][4465 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1cb68d29-9d0b-40dc-a128-ff1030d703bb","id":"QR_1cb68d29-9d0b-40dc-a128-ff1030d703bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:38:18][350547660083797][4621 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-09-06 21:38:18][350547660083797][4621 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-09-06 21:38:18][350547660083797][4621 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:43:30][359590189950527][1 ms][INFO] === Request start === [2025-09-06 21:43:30][359590189950527][1 ms][DEBUG] START check_scloud [2025-09-06 21:43:30][359590189950527][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:43:31][359590189950527][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 21257 16311 24070896 105476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:43:31][359590189950527][337 ms][DEBUG] targetPkg: running [2025-09-06 21:43:31][359590189950527][337 ms][DEBUG] END check_scloud in 336 ms [2025-09-06 21:43:31][359590189950527][337 ms][DEBUG] START check_boot_completed [2025-09-06 21:43:31][359590189950527][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:43:31][359590189950527][384 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 21:43:31][359590189950527][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:43:31][359590189950527][446 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 21:43:31][359590189950527][446 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 21:43:31][359590189950527][446 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:43:31][359590189950527][446 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359590189950527\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AIO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7851\"}'\'' -e'"" [2025-09-06 21:43:31][359590189950527][446 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:43:31][359590189950527][446 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359590189950527\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"AIO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7851\"}'\'' -e'"" [2025-09-06 21:43:37][359590189950527][6867 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9de6463-b121-4426-977e-f06ad081c1f5","id":"QR_f9de6463-b121-4426-977e-f06ad081c1f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:43:37][359590189950527][7023 ms][DEBUG] proc_open done in 6576 ms; code=255; res.len=3343 [2025-09-06 21:43:37][359590189950527][7023 ms][DEBUG] END runCmdUntilRes#1 in 6576 ms [2025-09-06 21:43:37][359590189950527][7023 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:44:04][350039935371058][0 ms][INFO] === Request start === [2025-09-06 21:44:04][350039935371058][1 ms][DEBUG] START check_scloud [2025-09-06 21:44:04][350039935371058][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:44:05][350039935371058][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 21257 16311 24207316 124016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:44:05][350039935371058][323 ms][DEBUG] targetPkg: running [2025-09-06 21:44:05][350039935371058][323 ms][DEBUG] END check_scloud in 322 ms [2025-09-06 21:44:05][350039935371058][323 ms][DEBUG] START check_boot_completed [2025-09-06 21:44:05][350039935371058][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:44:05][350039935371058][369 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:44:05][350039935371058][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:44:05][350039935371058][416 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:44:05][350039935371058][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 21:44:05][350039935371058][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:44:05][350039935371058][525 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6865\nsuccessfulTxPacketsPerSecond: 21.829627271628\nretriedTxPackets: 1687\nretriedTxPacketsPerSecond: 1.4256527193879112\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6410\nsuccessfulRxPacketsPerSecond: 28.690303187968595\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:44:05][350039935371058][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:44:05][350039935371058][1166 ms][DEBUG] SU: done in 641 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.545/303.545/303.545/0.000 ms\n [2025-09-06 21:44:05][350039935371058][1166 ms][DEBUG] check_internet: online [2025-09-06 21:44:05][350039935371058][1166 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:44:05][350039935371058][1166 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039935371058\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1263\"}'\'' -e'"" [2025-09-06 21:44:05][350039935371058][1166 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:44:05][350039935371058][1166 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039935371058\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1263\"}'\'' -e'"" [2025-09-06 21:44:11][350039935371058][6321 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd30cf9a-5737-41a4-8975-7d66ebddecd3","id":"QR_dd30cf9a-5737-41a4-8975-7d66ebddecd3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:44:11][350039935371058][6477 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-06 21:44:11][350039935371058][6477 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 21:44:11][350039935371058][6477 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:44:14][350039935371058][0 ms][INFO] === Request start === [2025-09-06 21:44:14][350039935371058][1 ms][DEBUG] START check_scloud [2025-09-06 21:44:14][350039935371058][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:44:15][350039935371058][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 21257 16311 24380636 134924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:44:15][350039935371058][321 ms][DEBUG] targetPkg: running [2025-09-06 21:44:15][350039935371058][321 ms][DEBUG] END check_scloud in 320 ms [2025-09-06 21:44:15][350039935371058][321 ms][DEBUG] START check_boot_completed [2025-09-06 21:44:15][350039935371058][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:44:15][350039935371058][368 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:44:15][350039935371058][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:44:15][350039935371058][461 ms][DEBUG] SU: done in 94 ms; out [2025-09-06 21:44:15][350039935371058][462 ms][DEBUG] END check_boot_completed in 140 ms [2025-09-06 21:44:15][350039935371058][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:44:15][350039935371058][602 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6865\nsuccessfulTxPacketsPerSecond: 21.829627271628\nretriedTxPackets: 1687\nretriedTxPacketsPerSecond: 1.4256527193879112\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6410\nsuccessfulRxPacketsPerSecond: 28.690303187968595\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:44:15][350039935371058][602 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:44:15][350039935371058][1072 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=336 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 336.891/336.891/336.891/0.000 ms\n [2025-09-06 21:44:15][350039935371058][1072 ms][DEBUG] check_internet: online [2025-09-06 21:44:15][350039935371058][1072 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:44:15][350039935371058][1072 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039935371058\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8582\"}'\'' -e'"" [2025-09-06 21:44:15][350039935371058][1072 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:44:15][350039935371058][1072 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039935371058\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8582\"}'\'' -e'"" [2025-09-06 21:44:19][350039935371058][4851 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_970a632e-6481-4b86-a362-1ba4bdbd84b8","id":"QR_970a632e-6481-4b86-a362-1ba4bdbd84b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:44:19][350039935371058][5007 ms][DEBUG] proc_open done in 3935 ms; code=255; res.len=3343 [2025-09-06 21:44:19][350039935371058][5007 ms][DEBUG] END runCmdUntilRes#1 in 3935 ms [2025-09-06 21:44:19][350039935371058][5007 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:44:22][354099887884181][0 ms][INFO] === Request start === [2025-09-06 21:44:22][354099887884181][1 ms][DEBUG] START check_scloud [2025-09-06 21:44:22][354099887884181][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:44:23][354099887884181][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 21257 16311 24558052 143408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:44:23][354099887884181][285 ms][DEBUG] targetPkg: running [2025-09-06 21:44:23][354099887884181][285 ms][DEBUG] END check_scloud in 285 ms [2025-09-06 21:44:23][354099887884181][285 ms][DEBUG] START check_boot_completed [2025-09-06 21:44:23][354099887884181][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:44:23][354099887884181][332 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 21:44:23][354099887884181][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:44:23][354099887884181][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:44:23][354099887884181][379 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 21:44:23][354099887884181][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:44:23][354099887884181][489 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6865\nsuccessfulTxPacketsPerSecond: 21.829627271628\nretriedTxPackets: 1687\nretriedTxPacketsPerSecond: 1.4256527193879112\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6410\nsuccessfulRxPacketsPerSecond: 28.690303187968595\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:44:23][354099887884181][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:44:23][354099887884181][941 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=338 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 338.096/338.096/338.096/0.000 ms\n [2025-09-06 21:44:23][354099887884181][942 ms][DEBUG] check_internet: online [2025-09-06 21:44:23][354099887884181][942 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:44:23][354099887884181][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099887884181\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6337\"}'\'' -e'"" [2025-09-06 21:44:23][354099887884181][942 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:44:23][354099887884181][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099887884181\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"PGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6337\"}'\'' -e'"" [2025-09-06 21:44:28][354099887884181][5581 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3c0e075-910b-412d-b79e-10890795ef32","id":"QR_a3c0e075-910b-412d-b79e-10890795ef32","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:44:28][354099887884181][5737 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-09-06 21:44:28][354099887884181][5737 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-09-06 21:44:28][354099887884181][5737 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:44:32][354099887884181][0 ms][INFO] === Request start === [2025-09-06 21:44:32][354099887884181][1 ms][DEBUG] START check_scloud [2025-09-06 21:44:32][354099887884181][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:44:32][354099887884181][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 21257 16311 24706760 144916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:44:32][354099887884181][315 ms][DEBUG] targetPkg: running [2025-09-06 21:44:32][354099887884181][315 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 21:44:32][354099887884181][316 ms][DEBUG] START check_boot_completed [2025-09-06 21:44:32][354099887884181][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:44:32][354099887884181][362 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 21:44:32][354099887884181][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:44:32][354099887884181][424 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 21:44:32][354099887884181][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 21:44:32][354099887884181][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:44:32][354099887884181][534 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6865\nsuccessfulTxPacketsPerSecond: 21.829627271628\nretriedTxPackets: 1687\nretriedTxPacketsPerSecond: 1.4256527193879112\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6410\nsuccessfulRxPacketsPerSecond: 28.690303187968595\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:44:32][354099887884181][534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:44:32][354099887884181][893 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.030/250.030/250.030/0.000 ms\n [2025-09-06 21:44:32][354099887884181][893 ms][DEBUG] check_internet: online [2025-09-06 21:44:32][354099887884181][893 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:44:32][354099887884181][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099887884181\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7658\"}'\'' -e'"" [2025-09-06 21:44:32][354099887884181][893 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:44:32][354099887884181][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099887884181\",\"model\":\"SM-A336M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7658\"}'\'' -e'"" [2025-09-06 21:44:37][354099887884181][4908 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62456f43-f84f-4563-9168-e85b7e6a77b4","id":"QR_62456f43-f84f-4563-9168-e85b7e6a77b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:44:37][354099887884181][5064 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-09-06 21:44:37][354099887884181][5064 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-09-06 21:44:37][354099887884181][5064 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:46:04][350616250979662][0 ms][INFO] === Request start === [2025-09-06 21:46:04][350616250979662][0 ms][DEBUG] START check_scloud [2025-09-06 21:46:04][350616250979662][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:46:04][350616250979662][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 21257 16311 24814436 155972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:46:04][350616250979662][292 ms][DEBUG] targetPkg: running [2025-09-06 21:46:04][350616250979662][292 ms][DEBUG] END check_scloud in 291 ms [2025-09-06 21:46:04][350616250979662][292 ms][DEBUG] START check_boot_completed [2025-09-06 21:46:04][350616250979662][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:46:04][350616250979662][323 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 21:46:04][350616250979662][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:46:04][350616250979662][370 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:46:04][350616250979662][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 21:46:04][350616250979662][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:46:05][350616250979662][479 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6865\nsuccessfulTxPacketsPerSecond: 21.829627271628\nretriedTxPackets: 1687\nretriedTxPacketsPerSecond: 1.4256527193879112\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6410\nsuccessfulRxPacketsPerSecond: 28.690303187968595\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:46:05][350616250979662][480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:46:05][350616250979662][885 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.181/298.181/298.181/0.000 ms\n [2025-09-06 21:46:05][350616250979662][885 ms][DEBUG] check_internet: online [2025-09-06 21:46:05][350616250979662][885 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:46:05][350616250979662][885 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616250979662\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6213\"}'\'' -e'"" [2025-09-06 21:46:05][350616250979662][885 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:46:05][350616250979662][885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616250979662\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6213\"}'\'' -e'"" [2025-09-06 21:46:10][350616250979662][5931 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74d3be6b-3185-4b4c-b0b1-b4975a9989f5","id":"QR_74d3be6b-3185-4b4c-b0b1-b4975a9989f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:46:10][350616250979662][6087 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-09-06 21:46:10][350616250979662][6087 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-09-06 21:46:10][350616250979662][6087 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:46:14][350616250979662][0 ms][INFO] === Request start === [2025-09-06 21:46:14][350616250979662][1 ms][DEBUG] START check_scloud [2025-09-06 21:46:14][350616250979662][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:46:14][350616250979662][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 21257 16311 24987628 167796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:46:14][350616250979662][304 ms][DEBUG] targetPkg: running [2025-09-06 21:46:14][350616250979662][304 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 21:46:14][350616250979662][304 ms][DEBUG] START check_boot_completed [2025-09-06 21:46:14][350616250979662][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:46:14][350616250979662][351 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 21:46:14][350616250979662][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:46:14][350616250979662][398 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:46:14][350616250979662][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 21:46:14][350616250979662][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 21:46:14][350616250979662][523 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6865\nsuccessfulTxPacketsPerSecond: 21.829627271628\nretriedTxPackets: 1687\nretriedTxPacketsPerSecond: 1.4256527193879112\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6410\nsuccessfulRxPacketsPerSecond: 28.690303187968595\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 21:46:14][350616250979662][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 21:46:15][350616250979662][960 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=338 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 338.364/338.364/338.364/0.000 ms\n [2025-09-06 21:46:15][350616250979662][960 ms][DEBUG] check_internet: online [2025-09-06 21:46:15][350616250979662][960 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:46:15][350616250979662][961 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616250979662\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4496\"}'\'' -e'"" [2025-09-06 21:46:15][350616250979662][961 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:46:15][350616250979662][961 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616250979662\",\"model\":\"SM-A256E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4496\"}'\'' -e'"" [2025-09-06 21:46:18][350616250979662][4647 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cadd8425-801b-4dc7-ac0d-b7b1d805b9ec","id":"QR_cadd8425-801b-4dc7-ac0d-b7b1d805b9ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:46:19][350616250979662][4803 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-09-06 21:46:19][350616250979662][4803 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-09-06 21:46:19][350616250979662][4803 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:47:04][353600810257642][0 ms][INFO] === Request start === [2025-09-06 21:47:04][353600810257642][1 ms][DEBUG] START check_scloud [2025-09-06 21:47:04][353600810257642][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:47:04][353600810257642][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 21257 16311 25087152 178800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:47:04][353600810257642][310 ms][DEBUG] targetPkg: running [2025-09-06 21:47:04][353600810257642][310 ms][DEBUG] END check_scloud in 309 ms [2025-09-06 21:47:04][353600810257642][310 ms][DEBUG] START check_boot_completed [2025-09-06 21:47:04][353600810257642][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:47:04][353600810257642][356 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 21:47:04][353600810257642][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:47:04][353600810257642][403 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:47:04][353600810257642][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 21:47:04][353600810257642][403 ms][DEBUG] rawBody.length=1160 [2025-09-06 21:47:04][353600810257642][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810257642\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4920\"}'\'' -e'"" [2025-09-06 21:47:04][353600810257642][403 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:47:04][353600810257642][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810257642\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4920\"}'\'' -e'"" [2025-09-06 21:47:08][353600810257642][4652 ms][DEBUG] proc_open done in 4249 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 21:47:08][353600810257642][4653 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-09-06 21:47:08][353600810257642][4653 ms][WARN] Detected error: Process with pid 21257 either refused to load frida-agent, or terminated during injectionProcess with pid 21257 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 21:47:08][353600810257642][4653 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 21:47:09][353600810257642][4949 ms][DEBUG] SU: done in 296 ms; outsystem 16544 16311 13387180 229624 ep_poll 0 S system_server\n [2025-09-06 21:47:09][353600810257642][4949 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 21:47:09][353600810257642][5105 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 21:47:09][353600810257642][5105 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 21:47:09][353600810257642][5106 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 21:47:09][353600810257642][5246 ms][DEBUG] SU: done in 140 ms; out [2025-09-06 21:47:09][353600810257642][5246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 21:47:09][353600810257642][5480 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 21:47:11][353600810257642][7495 ms][DEBUG] START check_boot_completed [2025-09-06 21:47:11][353600810257642][7495 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:47:11][353600810257642][7542 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 21:47:11][353600810257642][7542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:47:11][353600810257642][7590 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:47:11][353600810257642][7590 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 21:47:14][353600810257642][10604 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 21:47:14][353600810257642][10604 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810257642\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4920\"}'\'' -e'"" [2025-09-06 21:47:20][353600810257642][16415 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_152fbaac-d0ba-4560-b5b9-f9d7929b2ac5","id":"QR_152fbaac-d0ba-4560-b5b9-f9d7929b2ac5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:47:20][353600810257642][16571 ms][DEBUG] proc_open done in 5967 ms; code=255; res.len=3343 [2025-09-06 21:47:20][353600810257642][16571 ms][DEBUG] END runCmdUntilRes#2 in 5967 ms [2025-09-06 21:47:20][353600810257642][16571 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 21:47:24][353600810257642][0 ms][INFO] === Request start === [2025-09-06 21:47:24][353600810257642][1 ms][DEBUG] START check_scloud [2025-09-06 21:47:24][353600810257642][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 21:47:24][353600810257642][286 ms][DEBUG] SU: done in 286 ms; outu0_a118 24446 16311 23707360 124564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 21:47:24][353600810257642][287 ms][DEBUG] targetPkg: running [2025-09-06 21:47:24][353600810257642][287 ms][DEBUG] END check_scloud in 286 ms [2025-09-06 21:47:24][353600810257642][287 ms][DEBUG] START check_boot_completed [2025-09-06 21:47:24][353600810257642][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 21:47:24][353600810257642][332 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 21:47:24][353600810257642][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 21:47:24][353600810257642][379 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 21:47:24][353600810257642][379 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 21:47:24][353600810257642][379 ms][DEBUG] rawBody.length=1150 [2025-09-06 21:47:24][353600810257642][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810257642\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3065\"}'\'' -e'"" [2025-09-06 21:47:24][353600810257642][379 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 21:47:24][353600810257642][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810257642\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3065\"}'\'' -e'"" [2025-09-06 21:47:28][353600810257642][4065 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_680237de-89ef-436e-8dc1-38b058e449e7","id":"QR_680237de-89ef-436e-8dc1-38b058e449e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 21:47:28][353600810257642][4222 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-09-06 21:47:28][353600810257642][4222 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-09-06 21:47:28][353600810257642][4222 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:05:05][353283326279887][1 ms][INFO] === Request start === [2025-09-06 22:05:05][353283326279887][1 ms][DEBUG] START check_scloud [2025-09-06 22:05:05][353283326279887][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:05:05][353283326279887][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 24446 16311 23774620 138596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:05:05][353283326279887][306 ms][DEBUG] targetPkg: running [2025-09-06 22:05:05][353283326279887][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 22:05:05][353283326279887][306 ms][DEBUG] START check_boot_completed [2025-09-06 22:05:05][353283326279887][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:05:05][353283326279887][337 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 22:05:05][353283326279887][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:05:05][353283326279887][384 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:05:05][353283326279887][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 22:05:05][353283326279887][385 ms][DEBUG] rawBody.length=1160 [2025-09-06 22:05:05][353283326279887][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283326279887\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7145\"}'\'' -e'"" [2025-09-06 22:05:05][353283326279887][385 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:05:05][353283326279887][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283326279887\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7145\"}'\'' -e'"" [2025-09-06 22:05:11][353283326279887][6320 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b180e72-1d70-4405-9009-b80a3d69533f","id":"QR_5b180e72-1d70-4405-9009-b80a3d69533f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:05:11][353283326279887][6477 ms][DEBUG] proc_open done in 6091 ms; code=255; res.len=3343 [2025-09-06 22:05:11][353283326279887][6477 ms][DEBUG] END runCmdUntilRes#1 in 6092 ms [2025-09-06 22:05:11][353283326279887][6477 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:05:15][353283326279887][0 ms][INFO] === Request start === [2025-09-06 22:05:15][353283326279887][0 ms][DEBUG] START check_scloud [2025-09-06 22:05:15][353283326279887][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:05:15][353283326279887][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 24446 16311 23971504 149656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:05:15][353283326279887][294 ms][DEBUG] targetPkg: running [2025-09-06 22:05:15][353283326279887][294 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 22:05:15][353283326279887][294 ms][DEBUG] START check_boot_completed [2025-09-06 22:05:15][353283326279887][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:05:15][353283326279887][340 ms][DEBUG] ADB: done in 45 ms; out [2025-09-06 22:05:15][353283326279887][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:05:15][353283326279887][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:05:15][353283326279887][387 ms][DEBUG] END check_boot_completed in 92 ms [2025-09-06 22:05:15][353283326279887][387 ms][DEBUG] rawBody.length=1150 [2025-09-06 22:05:15][353283326279887][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283326279887\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5792\"}'\'' -e'"" [2025-09-06 22:05:15][353283326279887][387 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:05:15][353283326279887][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283326279887\",\"model\":\"SM-A156U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5792\"}'\'' -e'"" [2025-09-06 22:05:19][353283326279887][4136 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9148d0d5-d1ec-4672-b5bf-7ae7db1ae87c","id":"QR_9148d0d5-d1ec-4672-b5bf-7ae7db1ae87c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:05:19][353283326279887][4292 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-06 22:05:19][353283326279887][4292 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-06 22:05:19][353283326279887][4292 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:06:04][354291421743193][0 ms][INFO] === Request start === [2025-09-06 22:06:04][354291421743193][1 ms][DEBUG] START check_scloud [2025-09-06 22:06:04][354291421743193][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:06:04][354291421743193][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 24446 16311 24091376 161404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:06:04][354291421743193][303 ms][DEBUG] targetPkg: running [2025-09-06 22:06:04][354291421743193][303 ms][DEBUG] END check_scloud in 303 ms [2025-09-06 22:06:04][354291421743193][303 ms][DEBUG] START check_boot_completed [2025-09-06 22:06:04][354291421743193][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:06:04][354291421743193][350 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 22:06:04][354291421743193][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:06:04][354291421743193][398 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 22:06:04][354291421743193][399 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 22:06:04][354291421743193][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 22:06:05][354291421743193][506 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7223\nsuccessfulTxPacketsPerSecond: 0.01600621040963894\nretriedTxPackets: 1815\nretriedTxPacketsPerSecond: 0.01600621040963894\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6718\nsuccessfulRxPacketsPerSecond: 0.01600621040963894\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 22:06:05][354291421743193][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 22:06:06][354291421743193][1850 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.654/304.654/304.654/0.000 ms\n [2025-09-06 22:06:06][354291421743193][1850 ms][DEBUG] check_internet: online [2025-09-06 22:06:06][354291421743193][1850 ms][DEBUG] rawBody.length=1160 [2025-09-06 22:06:06][354291421743193][1850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291421743193\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6491\"}'\'' -e'"" [2025-09-06 22:06:06][354291421743193][1850 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:06:06][354291421743193][1850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291421743193\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6491\"}'\'' -e'"" [2025-09-06 22:06:12][354291421743193][7598 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85c99602-db67-4281-a193-150105867d3b","id":"QR_85c99602-db67-4281-a193-150105867d3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:06:12][354291421743193][7754 ms][DEBUG] proc_open done in 5904 ms; code=255; res.len=3343 [2025-09-06 22:06:12][354291421743193][7754 ms][DEBUG] END runCmdUntilRes#1 in 5904 ms [2025-09-06 22:06:12][354291421743193][7754 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:06:15][354291421743193][0 ms][INFO] === Request start === [2025-09-06 22:06:15][354291421743193][1 ms][DEBUG] START check_scloud [2025-09-06 22:06:15][354291421743193][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:06:16][354291421743193][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 24446 16311 24216624 172216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:06:16][354291421743193][302 ms][DEBUG] targetPkg: running [2025-09-06 22:06:16][354291421743193][302 ms][DEBUG] END check_scloud in 301 ms [2025-09-06 22:06:16][354291421743193][302 ms][DEBUG] START check_boot_completed [2025-09-06 22:06:16][354291421743193][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:06:16][354291421743193][348 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 22:06:16][354291421743193][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:06:16][354291421743193][395 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:06:16][354291421743193][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 22:06:16][354291421743193][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 22:06:16][354291421743193][551 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7223\nsuccessfulTxPacketsPerSecond: 0.01600621040963894\nretriedTxPackets: 1815\nretriedTxPacketsPerSecond: 0.01600621040963894\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6718\nsuccessfulRxPacketsPerSecond: 0.01600621040963894\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 22:06:16][354291421743193][552 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 22:06:16][354291421743193][942 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=277 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 277.636/277.636/277.636/0.000 ms\n [2025-09-06 22:06:16][354291421743193][942 ms][DEBUG] check_internet: online [2025-09-06 22:06:16][354291421743193][942 ms][DEBUG] rawBody.length=1150 [2025-09-06 22:06:16][354291421743193][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291421743193\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2082\"}'\'' -e'"" [2025-09-06 22:06:16][354291421743193][942 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:06:16][354291421743193][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291421743193\",\"model\":\"SM-A127M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2082\"}'\'' -e'"" [2025-09-06 22:06:20][354291421743193][4566 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_019a01d6-b598-4871-be19-da626a7f95d7","id":"QR_019a01d6-b598-4871-be19-da626a7f95d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:06:20][354291421743193][4722 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-09-06 22:06:20][354291421743193][4722 ms][DEBUG] END runCmdUntilRes#1 in 3781 ms [2025-09-06 22:06:20][354291421743193][4722 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:14:05][353960264739770][1 ms][INFO] === Request start === [2025-09-06 22:14:05][353960264739770][1 ms][DEBUG] START check_scloud [2025-09-06 22:14:05][353960264739770][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:14:05][353960264739770][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 24446 16311 24329252 181840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:14:05][353960264739770][305 ms][DEBUG] targetPkg: running [2025-09-06 22:14:05][353960264739770][305 ms][DEBUG] END check_scloud in 304 ms [2025-09-06 22:14:05][353960264739770][305 ms][DEBUG] START check_boot_completed [2025-09-06 22:14:05][353960264739770][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:14:05][353960264739770][336 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 22:14:05][353960264739770][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:14:05][353960264739770][383 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:14:05][353960264739770][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 22:14:05][353960264739770][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 22:14:05][353960264739770][493 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7412\nsuccessfulTxPacketsPerSecond: 0.14958067550633058\nretriedTxPackets: 1886\nretriedTxPacketsPerSecond: 0.06648030022503582\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6874\nsuccessfulRxPacketsPerSecond: 0.12298855541631626\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 22:14:05][353960264739770][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 22:14:06][353960264739770][1977 ms][DEBUG] SU: done in 1484 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=406 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 406.020/406.020/406.020/0.000 ms\n [2025-09-06 22:14:06][353960264739770][1977 ms][DEBUG] check_internet: online [2025-09-06 22:14:06][353960264739770][1977 ms][DEBUG] rawBody.length=1160 [2025-09-06 22:14:06][353960264739770][1977 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353960264739770\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5259\"}'\'' -e'"" [2025-09-06 22:14:06][353960264739770][1977 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:14:06][353960264739770][1977 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353960264739770\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5259\"}'\'' -e'"" [2025-09-06 22:14:12][353960264739770][7319 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e345263-8d54-4dc9-9f6d-78af840a15d9","id":"QR_8e345263-8d54-4dc9-9f6d-78af840a15d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:14:12][353960264739770][7475 ms][DEBUG] proc_open done in 5498 ms; code=255; res.len=3343 [2025-09-06 22:14:12][353960264739770][7475 ms][DEBUG] END runCmdUntilRes#1 in 5498 ms [2025-09-06 22:14:12][353960264739770][7475 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:14:15][353960264739770][0 ms][INFO] === Request start === [2025-09-06 22:14:15][353960264739770][1 ms][DEBUG] START check_scloud [2025-09-06 22:14:15][353960264739770][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:14:16][353960264739770][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 24446 16311 24487288 191144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:14:16][353960264739770][316 ms][DEBUG] targetPkg: running [2025-09-06 22:14:16][353960264739770][316 ms][DEBUG] END check_scloud in 315 ms [2025-09-06 22:14:16][353960264739770][316 ms][DEBUG] START check_boot_completed [2025-09-06 22:14:16][353960264739770][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:14:16][353960264739770][363 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 22:14:16][353960264739770][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:14:16][353960264739770][409 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:14:16][353960264739770][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 22:14:16][353960264739770][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 22:14:16][353960264739770][519 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7412\nsuccessfulTxPacketsPerSecond: 0.14958067550633058\nretriedTxPackets: 1886\nretriedTxPacketsPerSecond: 0.06648030022503582\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6874\nsuccessfulRxPacketsPerSecond: 0.12298855541631626\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 22:14:16][353960264739770][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 22:14:16][353960264739770][909 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=288 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 288.343/288.343/288.343/0.000 ms\n [2025-09-06 22:14:16][353960264739770][909 ms][DEBUG] check_internet: online [2025-09-06 22:14:16][353960264739770][909 ms][DEBUG] rawBody.length=1150 [2025-09-06 22:14:16][353960264739770][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353960264739770\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4413\"}'\'' -e'"" [2025-09-06 22:14:16][353960264739770][909 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:14:16][353960264739770][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353960264739770\",\"model\":\"SM-G780G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4413\"}'\'' -e'"" [2025-09-06 22:14:20][353960264739770][4627 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d44fad13-d413-4371-9743-d5fe1f7de2ef","id":"QR_d44fad13-d413-4371-9743-d5fe1f7de2ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:14:20][353960264739770][4783 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-09-06 22:14:20][353960264739770][4783 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-06 22:14:20][353960264739770][4783 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:16:04][353150182043477][0 ms][INFO] === Request start === [2025-09-06 22:16:04][353150182043477][1 ms][DEBUG] START check_scloud [2025-09-06 22:16:04][353150182043477][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:16:04][353150182043477][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 24446 16311 24592952 201856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:16:04][353150182043477][311 ms][DEBUG] targetPkg: running [2025-09-06 22:16:04][353150182043477][311 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 22:16:04][353150182043477][311 ms][DEBUG] START check_boot_completed [2025-09-06 22:16:04][353150182043477][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:16:04][353150182043477][342 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 22:16:04][353150182043477][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:16:04][353150182043477][389 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:16:04][353150182043477][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 22:16:04][353150182043477][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 22:16:05][353150182043477][514 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7412\nsuccessfulTxPacketsPerSecond: 0.14958067550633058\nretriedTxPackets: 1886\nretriedTxPacketsPerSecond: 0.06648030022503582\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6874\nsuccessfulRxPacketsPerSecond: 0.12298855541631626\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 22:16:05][353150182043477][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 22:16:06][353150182043477][1920 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.909/298.909/298.909/0.000 ms\n [2025-09-06 22:16:06][353150182043477][1920 ms][DEBUG] check_internet: online [2025-09-06 22:16:06][353150182043477][1920 ms][DEBUG] rawBody.length=1159 [2025-09-06 22:16:06][353150182043477][1920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182043477\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7006\"}'\'' -e'"" [2025-09-06 22:16:06][353150182043477][1920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:16:06][353150182043477][1920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182043477\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7006\"}'\'' -e'"" [2025-09-06 22:16:11][353150182043477][6981 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d07e1f33-ca27-4b70-8b78-6dccad9688bb","id":"QR_d07e1f33-ca27-4b70-8b78-6dccad9688bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:16:11][353150182043477][7137 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-09-06 22:16:11][353150182043477][7137 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-09-06 22:16:11][353150182043477][7137 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:16:15][353150182043477][1 ms][INFO] === Request start === [2025-09-06 22:16:15][353150182043477][1 ms][DEBUG] START check_scloud [2025-09-06 22:16:15][353150182043477][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:16:15][353150182043477][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 24446 16311 24758080 213700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:16:15][353150182043477][255 ms][DEBUG] targetPkg: running [2025-09-06 22:16:15][353150182043477][255 ms][DEBUG] END check_scloud in 254 ms [2025-09-06 22:16:15][353150182043477][255 ms][DEBUG] START check_boot_completed [2025-09-06 22:16:15][353150182043477][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:16:15][353150182043477][302 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 22:16:15][353150182043477][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:16:15][353150182043477][349 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:16:15][353150182043477][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 22:16:15][353150182043477][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 22:16:15][353150182043477][458 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7412\nsuccessfulTxPacketsPerSecond: 0.14958067550633058\nretriedTxPackets: 1886\nretriedTxPacketsPerSecond: 0.06648030022503582\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 6874\nsuccessfulRxPacketsPerSecond: 0.12298855541631626\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 22:16:15][353150182043477][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 22:16:15][353150182043477][849 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.611/255.611/255.611/0.000 ms\n [2025-09-06 22:16:15][353150182043477][849 ms][DEBUG] check_internet: online [2025-09-06 22:16:15][353150182043477][849 ms][DEBUG] rawBody.length=1149 [2025-09-06 22:16:15][353150182043477][849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182043477\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3778\"}'\'' -e'"" [2025-09-06 22:16:15][353150182043477][849 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:16:15][353150182043477][849 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182043477\",\"model\":\"SM-X205\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3778\"}'\'' -e'"" [2025-09-06 22:16:19][353150182043477][4582 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e05d768e-8d77-4e3a-b510-d03f1248b6d2","id":"QR_e05d768e-8d77-4e3a-b510-d03f1248b6d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:16:19][353150182043477][4738 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-09-06 22:16:19][353150182043477][4738 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-09-06 22:16:19][353150182043477][4738 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:31:03][357211249618226][1 ms][INFO] === Request start === [2025-09-06 22:31:03][357211249618226][1 ms][DEBUG] START check_scloud [2025-09-06 22:31:03][357211249618226][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:31:03][357211249618226][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 24446 16311 24866740 216764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:31:03][357211249618226][318 ms][DEBUG] targetPkg: running [2025-09-06 22:31:03][357211249618226][318 ms][DEBUG] END check_scloud in 317 ms [2025-09-06 22:31:03][357211249618226][318 ms][DEBUG] START check_boot_completed [2025-09-06 22:31:03][357211249618226][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:31:04][357211249618226][364 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 22:31:04][357211249618226][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:31:04][357211249618226][427 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 22:31:04][357211249618226][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 22:31:04][357211249618226][427 ms][DEBUG] rawBody.length=1150 [2025-09-06 22:31:04][357211249618226][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211249618226\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3173\"}'\'' -e'"" [2025-09-06 22:31:04][357211249618226][427 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:31:04][357211249618226][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211249618226\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3173\"}'\'' -e'"" [2025-09-06 22:31:08][357211249618226][4988 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67020055-da83-45bb-99c0-7356975077e8","id":"QR_67020055-da83-45bb-99c0-7356975077e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:31:08][357211249618226][5144 ms][DEBUG] proc_open done in 4718 ms; code=255; res.len=3343 [2025-09-06 22:31:08][357211249618226][5145 ms][DEBUG] END runCmdUntilRes#1 in 4718 ms [2025-09-06 22:31:08][357211249618226][5145 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:31:11][357211249618226][0 ms][INFO] === Request start === [2025-09-06 22:31:11][357211249618226][1 ms][DEBUG] START check_scloud [2025-09-06 22:31:11][357211249618226][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:31:11][357211249618226][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 24446 16311 25057548 228608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:31:11][357211249618226][307 ms][DEBUG] targetPkg: running [2025-09-06 22:31:11][357211249618226][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 22:31:11][357211249618226][307 ms][DEBUG] START check_boot_completed [2025-09-06 22:31:11][357211249618226][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:31:11][357211249618226][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 22:31:11][357211249618226][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:31:11][357211249618226][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:31:11][357211249618226][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 22:31:11][357211249618226][400 ms][DEBUG] rawBody.length=1160 [2025-09-06 22:31:11][357211249618226][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211249618226\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8523\"}'\'' -e'"" [2025-09-06 22:31:11][357211249618226][400 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:31:11][357211249618226][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211249618226\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8523\"}'\'' -e'"" [2025-09-06 22:31:15][357211249618226][4602 ms][DEBUG] proc_open done in 4202 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 22:31:15][357211249618226][4602 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-09-06 22:31:15][357211249618226][4602 ms][WARN] Detected error: Process with pid 24446 either refused to load frida-agent, or terminated during injectionProcess with pid 24446 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 22:31:15][357211249618226][4603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 22:31:16][357211249618226][4853 ms][DEBUG] SU: done in 250 ms; outsystem 16544 16311 13353848 199668 ep_poll 0 S system_server\n [2025-09-06 22:31:16][357211249618226][4853 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 22:31:16][357211249618226][4993 ms][DEBUG] SU: done in 141 ms; out [2025-09-06 22:31:16][357211249618226][4993 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 22:31:16][357211249618226][4993 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 22:31:16][357211249618226][5149 ms][DEBUG] SU: done in 156 ms; out [2025-09-06 22:31:16][357211249618226][5149 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 22:31:16][357211249618226][5321 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 22:31:18][357211249618226][7336 ms][DEBUG] START check_boot_completed [2025-09-06 22:31:18][357211249618226][7336 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:31:18][357211249618226][7383 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 22:31:18][357211249618226][7383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:31:18][357211249618226][7430 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:31:18][357211249618226][7430 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 22:31:21][357211249618226][10445 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 22:31:21][357211249618226][10445 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211249618226\",\"model\":\"SM-A137F\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8523\"}'\'' -e'"" [2025-09-06 22:31:26][357211249618226][15756 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe103212-fde4-4f23-b118-1a1082e843f4","id":"QR_fe103212-fde4-4f23-b118-1a1082e843f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:31:27][357211249618226][15912 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-09-06 22:31:27][357211249618226][15912 ms][DEBUG] END runCmdUntilRes#2 in 5468 ms [2025-09-06 22:31:27][357211249618226][15912 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:34:04][350455581604347][1 ms][INFO] === Request start === [2025-09-06 22:34:04][350455581604347][1 ms][DEBUG] START check_scloud [2025-09-06 22:34:04][350455581604347][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:34:04][350455581604347][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 27204 16311 23627148 127748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:34:04][350455581604347][309 ms][DEBUG] targetPkg: running [2025-09-06 22:34:04][350455581604347][309 ms][DEBUG] END check_scloud in 308 ms [2025-09-06 22:34:04][350455581604347][309 ms][DEBUG] START check_boot_completed [2025-09-06 22:34:04][350455581604347][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:34:04][350455581604347][340 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 22:34:04][350455581604347][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:34:04][350455581604347][387 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:34:04][350455581604347][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 22:34:04][350455581604347][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 22:34:05][350455581604347][496 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7612\nsuccessfulTxPacketsPerSecond: 0.22848379701344568\nretriedTxPackets: 1961\nretriedTxPacketsPerSecond: 0.07357952785178759\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7044\nsuccessfulRxPacketsPerSecond: 0.20137554991015552\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 22:34:05][350455581604347][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 22:34:06][350455581604347][1919 ms][DEBUG] SU: done in 1423 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.892/300.892/300.892/0.000 ms\n [2025-09-06 22:34:06][350455581604347][1919 ms][DEBUG] check_internet: online [2025-09-06 22:34:06][350455581604347][1919 ms][DEBUG] rawBody.length=1160 [2025-09-06 22:34:06][350455581604347][1920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581604347\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7676\"}'\'' -e'"" [2025-09-06 22:34:06][350455581604347][1920 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:34:06][350455581604347][1920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581604347\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7676\"}'\'' -e'"" [2025-09-06 22:34:11][350455581604347][7276 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eeedf61a-e416-4c59-a6d3-fa91c01b6e2b","id":"QR_eeedf61a-e416-4c59-a6d3-fa91c01b6e2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:34:12][350455581604347][7432 ms][DEBUG] proc_open done in 5512 ms; code=255; res.len=3343 [2025-09-06 22:34:12][350455581604347][7432 ms][DEBUG] END runCmdUntilRes#1 in 5512 ms [2025-09-06 22:34:12][350455581604347][7432 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:34:15][350455581604347][0 ms][INFO] === Request start === [2025-09-06 22:34:15][350455581604347][1 ms][DEBUG] START check_scloud [2025-09-06 22:34:15][350455581604347][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:34:15][350455581604347][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 27204 16311 23781780 138304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:34:15][350455581604347][281 ms][DEBUG] targetPkg: running [2025-09-06 22:34:15][350455581604347][281 ms][DEBUG] END check_scloud in 281 ms [2025-09-06 22:34:15][350455581604347][281 ms][DEBUG] START check_boot_completed [2025-09-06 22:34:15][350455581604347][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:34:15][350455581604347][328 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 22:34:15][350455581604347][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:34:15][350455581604347][390 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 22:34:15][350455581604347][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 22:34:15][350455581604347][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 22:34:16][350455581604347][531 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7612\nsuccessfulTxPacketsPerSecond: 0.22848379701344568\nretriedTxPackets: 1961\nretriedTxPacketsPerSecond: 0.07357952785178759\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7044\nsuccessfulRxPacketsPerSecond: 0.20137554991015552\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 22:34:16][350455581604347][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 22:34:16][350455581604347][952 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=310 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 310.642/310.642/310.642/0.000 ms\n [2025-09-06 22:34:16][350455581604347][952 ms][DEBUG] check_internet: online [2025-09-06 22:34:16][350455581604347][952 ms][DEBUG] rawBody.length=1150 [2025-09-06 22:34:16][350455581604347][953 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581604347\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8362\"}'\'' -e'"" [2025-09-06 22:34:16][350455581604347][953 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:34:16][350455581604347][953 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455581604347\",\"model\":\"SM-A165M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8362\"}'\'' -e'"" [2025-09-06 22:34:20][350455581604347][4608 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1424478-f912-4b73-b21b-b22faf9e70a5","id":"QR_e1424478-f912-4b73-b21b-b22faf9e70a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:34:20][350455581604347][4764 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-09-06 22:34:20][350455581604347][4764 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-09-06 22:34:20][350455581604347][4764 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:57:04][351537270738061][1 ms][INFO] === Request start === [2025-09-06 22:57:04][351537270738061][1 ms][DEBUG] START check_scloud [2025-09-06 22:57:04][351537270738061][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:57:05][351537270738061][276 ms][DEBUG] SU: done in 274 ms; outu0_a118 27204 16311 23920228 150780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:57:05][351537270738061][276 ms][DEBUG] targetPkg: running [2025-09-06 22:57:05][351537270738061][276 ms][DEBUG] END check_scloud in 274 ms [2025-09-06 22:57:05][351537270738061][276 ms][DEBUG] START check_boot_completed [2025-09-06 22:57:05][351537270738061][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:57:05][351537270738061][307 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 22:57:05][351537270738061][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:57:05][351537270738061][354 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:57:05][351537270738061][354 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 22:57:05][351537270738061][354 ms][DEBUG] rawBody.length=1160 [2025-09-06 22:57:05][351537270738061][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537270738061\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9893\"}'\'' -e'"" [2025-09-06 22:57:05][351537270738061][354 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:57:05][351537270738061][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537270738061\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9893\"}'\'' -e'"" [2025-09-06 22:57:11][351537270738061][6883 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76ee0ccb-c265-4e73-ade0-8f0fe7b48773","id":"QR_76ee0ccb-c265-4e73-ade0-8f0fe7b48773","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:57:11][351537270738061][7040 ms][DEBUG] proc_open done in 6686 ms; code=255; res.len=3343 [2025-09-06 22:57:11][351537270738061][7040 ms][DEBUG] END runCmdUntilRes#1 in 6686 ms [2025-09-06 22:57:11][351537270738061][7040 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:57:15][351537270738061][0 ms][INFO] === Request start === [2025-09-06 22:57:15][351537270738061][1 ms][DEBUG] START check_scloud [2025-09-06 22:57:15][351537270738061][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:57:15][351537270738061][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 27204 16311 24057400 143944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:57:15][351537270738061][310 ms][DEBUG] targetPkg: running [2025-09-06 22:57:15][351537270738061][310 ms][DEBUG] END check_scloud in 310 ms [2025-09-06 22:57:15][351537270738061][310 ms][DEBUG] START check_boot_completed [2025-09-06 22:57:15][351537270738061][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:57:15][351537270738061][357 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 22:57:15][351537270738061][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:57:15][351537270738061][404 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:57:15][351537270738061][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 22:57:15][351537270738061][404 ms][DEBUG] rawBody.length=1150 [2025-09-06 22:57:15][351537270738061][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537270738061\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4419\"}'\'' -e'"" [2025-09-06 22:57:15][351537270738061][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:57:15][351537270738061][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537270738061\",\"model\":\"SM-A356E\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4419\"}'\'' -e'"" [2025-09-06 22:57:19][351537270738061][4153 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4620c16a-53da-4694-8283-a85a1d196699","id":"QR_4620c16a-53da-4694-8283-a85a1d196699","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:57:19][351537270738061][4309 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-09-06 22:57:19][351537270738061][4309 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-09-06 22:57:19][351537270738061][4309 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:58:04][352672513158865][0 ms][INFO] === Request start === [2025-09-06 22:58:04][352672513158865][1 ms][DEBUG] START check_scloud [2025-09-06 22:58:04][352672513158865][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:58:05][352672513158865][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 27204 16311 24165048 153604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:58:05][352672513158865][305 ms][DEBUG] targetPkg: running [2025-09-06 22:58:05][352672513158865][305 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 22:58:05][352672513158865][305 ms][DEBUG] START check_boot_completed [2025-09-06 22:58:05][352672513158865][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:58:05][352672513158865][352 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 22:58:05][352672513158865][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:58:05][352672513158865][400 ms][DEBUG] SU: done in 48 ms; out [2025-09-06 22:58:05][352672513158865][400 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 22:58:05][352672513158865][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 22:58:05][352672513158865][555 ms][DEBUG] SU: done in 155 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7937\nsuccessfulTxPacketsPerSecond: 0.38698842685553647\nretriedTxPackets: 2056\nretriedTxPacketsPerSecond: 0.1168266948997846\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7346\nsuccessfulRxPacketsPerSecond: 0.3504800846993538\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 22:58:05][352672513158865][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 22:58:06][352672513158865][1961 ms][DEBUG] SU: done in 1406 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=298 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 298.998/298.998/298.998/0.000 ms\n [2025-09-06 22:58:06][352672513158865][1961 ms][DEBUG] check_internet: online [2025-09-06 22:58:06][352672513158865][1961 ms][DEBUG] rawBody.length=1160 [2025-09-06 22:58:06][352672513158865][1962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513158865\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3708\"}'\'' -e'"" [2025-09-06 22:58:06][352672513158865][1962 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:58:06][352672513158865][1962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513158865\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3708\"}'\'' -e'"" [2025-09-06 22:58:12][352672513158865][7116 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd5125df-f85f-4056-af90-ab2b0987fc61","id":"QR_fd5125df-f85f-4056-af90-ab2b0987fc61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:58:12][352672513158865][7272 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-09-06 22:58:12][352672513158865][7272 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-09-06 22:58:12][352672513158865][7273 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 22:58:15][352672513158865][0 ms][INFO] === Request start === [2025-09-06 22:58:15][352672513158865][1 ms][DEBUG] START check_scloud [2025-09-06 22:58:15][352672513158865][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 22:58:16][352672513158865][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 27204 16311 24344512 160444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 22:58:16][352672513158865][307 ms][DEBUG] targetPkg: running [2025-09-06 22:58:16][352672513158865][307 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 22:58:16][352672513158865][308 ms][DEBUG] START check_boot_completed [2025-09-06 22:58:16][352672513158865][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 22:58:16][352672513158865][354 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 22:58:16][352672513158865][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 22:58:16][352672513158865][401 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 22:58:16][352672513158865][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 22:58:16][352672513158865][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 22:58:16][352672513158865][510 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7937\nsuccessfulTxPacketsPerSecond: 0.38698842685553647\nretriedTxPackets: 2056\nretriedTxPacketsPerSecond: 0.1168266948997846\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7346\nsuccessfulRxPacketsPerSecond: 0.3504800846993538\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 22:58:16][352672513158865][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 22:58:16][352672513158865][948 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=332 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 332.325/332.325/332.325/0.000 ms\n [2025-09-06 22:58:16][352672513158865][948 ms][DEBUG] check_internet: online [2025-09-06 22:58:16][352672513158865][948 ms][DEBUG] rawBody.length=1150 [2025-09-06 22:58:16][352672513158865][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513158865\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8479\"}'\'' -e'"" [2025-09-06 22:58:16][352672513158865][948 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 22:58:16][352672513158865][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352672513158865\",\"model\":\"SM-A135M\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8479\"}'\'' -e'"" [2025-09-06 22:58:20][352672513158865][4744 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3064e5d-f471-4037-bb52-d7b6d0e404c7","id":"QR_f3064e5d-f471-4037-bb52-d7b6d0e404c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 22:58:20][352672513158865][4900 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-09-06 22:58:20][352672513158865][4900 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-09-06 22:58:20][352672513158865][4900 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 23:02:04][353994912380836][1 ms][INFO] === Request start === [2025-09-06 23:02:04][353994912380836][1 ms][DEBUG] START check_scloud [2025-09-06 23:02:04][353994912380836][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 23:02:04][353994912380836][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 27204 16311 24466432 159784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 23:02:04][353994912380836][314 ms][DEBUG] targetPkg: running [2025-09-06 23:02:04][353994912380836][314 ms][DEBUG] END check_scloud in 313 ms [2025-09-06 23:02:04][353994912380836][314 ms][DEBUG] START check_boot_completed [2025-09-06 23:02:04][353994912380836][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 23:02:04][353994912380836][360 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 23:02:04][353994912380836][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 23:02:04][353994912380836][407 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 23:02:04][353994912380836][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 23:02:04][353994912380836][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 23:02:05][353994912380836][517 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7937\nsuccessfulTxPacketsPerSecond: 0.38698842685553647\nretriedTxPackets: 2056\nretriedTxPacketsPerSecond: 0.1168266948997846\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7346\nsuccessfulRxPacketsPerSecond: 0.3504800846993538\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 23:02:05][353994912380836][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 23:02:06][353994912380836][1970 ms][DEBUG] SU: done in 1451 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=301 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 301.360/301.360/301.360/0.000 ms\n [2025-09-06 23:02:06][353994912380836][1970 ms][DEBUG] check_internet: online [2025-09-06 23:02:06][353994912380836][1970 ms][DEBUG] rawBody.length=1160 [2025-09-06 23:02:06][353994912380836][1970 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994912380836\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5376\"}'\'' -e'"" [2025-09-06 23:02:06][353994912380836][1970 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 23:02:06][353994912380836][1970 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994912380836\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5376\"}'\'' -e'"" [2025-09-06 23:02:11][353994912380836][7281 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd749fb3-de27-4de0-8836-e3c2a3867089","id":"QR_bd749fb3-de27-4de0-8836-e3c2a3867089","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 23:02:11][353994912380836][7437 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-09-06 23:02:11][353994912380836][7437 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-09-06 23:02:11][353994912380836][7437 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 23:02:15][353994912380836][0 ms][INFO] === Request start === [2025-09-06 23:02:15][353994912380836][1 ms][DEBUG] START check_scloud [2025-09-06 23:02:15][353994912380836][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 23:02:15][353994912380836][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 27204 16311 24621256 170628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 23:02:15][353994912380836][250 ms][DEBUG] targetPkg: running [2025-09-06 23:02:15][353994912380836][250 ms][DEBUG] END check_scloud in 250 ms [2025-09-06 23:02:15][353994912380836][250 ms][DEBUG] START check_boot_completed [2025-09-06 23:02:15][353994912380836][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 23:02:15][353994912380836][297 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 23:02:15][353994912380836][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 23:02:15][353994912380836][344 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 23:02:15][353994912380836][344 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 23:02:15][353994912380836][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 23:02:15][353994912380836][453 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 7937\nsuccessfulTxPacketsPerSecond: 0.38698842685553647\nretriedTxPackets: 2056\nretriedTxPacketsPerSecond: 0.1168266948997846\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7346\nsuccessfulRxPacketsPerSecond: 0.3504800846993538\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 23:02:15][353994912380836][453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 23:02:16][353994912380836][891 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=317 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 317.851/317.851/317.851/0.000 ms\n [2025-09-06 23:02:16][353994912380836][891 ms][DEBUG] check_internet: online [2025-09-06 23:02:16][353994912380836][891 ms][DEBUG] rawBody.length=1150 [2025-09-06 23:02:16][353994912380836][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994912380836\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3726\"}'\'' -e'"" [2025-09-06 23:02:16][353994912380836][891 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 23:02:16][353994912380836][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994912380836\",\"model\":\"SM-A166U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3726\"}'\'' -e'"" [2025-09-06 23:02:20][353994912380836][4608 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_253d8692-cc80-4e15-848e-203770e6b2d2","id":"QR_253d8692-cc80-4e15-848e-203770e6b2d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 23:02:20][353994912380836][4765 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-09-06 23:02:20][353994912380836][4765 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-09-06 23:02:20][353994912380836][4765 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 23:11:03][351826112603835][1 ms][INFO] === Request start === [2025-09-06 23:11:03][351826112603835][1 ms][DEBUG] START check_scloud [2025-09-06 23:11:03][351826112603835][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 23:11:03][351826112603835][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 27204 16311 24697148 182276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 23:11:03][351826112603835][272 ms][DEBUG] targetPkg: running [2025-09-06 23:11:03][351826112603835][272 ms][DEBUG] END check_scloud in 271 ms [2025-09-06 23:11:03][351826112603835][272 ms][DEBUG] START check_boot_completed [2025-09-06 23:11:03][351826112603835][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 23:11:03][351826112603835][304 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 23:11:03][351826112603835][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 23:11:03][351826112603835][351 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 23:11:03][351826112603835][351 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 23:11:03][351826112603835][351 ms][DEBUG] rawBody.length=1150 [2025-09-06 23:11:03][351826112603835][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351826112603835\",\"model\":\"SM-G981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1419\"}'\'' -e'"" [2025-09-06 23:11:03][351826112603835][351 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 23:11:03][351826112603835][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351826112603835\",\"model\":\"SM-G981B\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"EUD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1419\"}'\'' -e'"" [2025-09-06 23:11:08][351826112603835][4896 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53889532-dd48-490f-895c-75e357201ccd","id":"QR_53889532-dd48-490f-895c-75e357201ccd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 23:11:08][351826112603835][5053 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-09-06 23:11:08][351826112603835][5053 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-09-06 23:11:08][351826112603835][5053 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 23:11:10][351826112603835][0 ms][INFO] === Request start === [2025-09-06 23:11:10][351826112603835][1 ms][DEBUG] START check_scloud [2025-09-06 23:11:10][351826112603835][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 23:11:11][351826112603835][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 27204 16311 24851088 192044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 23:11:11][351826112603835][294 ms][DEBUG] targetPkg: running [2025-09-06 23:11:11][351826112603835][294 ms][DEBUG] END check_scloud in 294 ms [2025-09-06 23:11:11][351826112603835][294 ms][DEBUG] START check_boot_completed [2025-09-06 23:11:11][351826112603835][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 23:11:11][351826112603835][341 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 23:11:11][351826112603835][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 23:11:11][351826112603835][403 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 23:11:11][351826112603835][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 23:11:11][351826112603835][404 ms][DEBUG] rawBody.length=1160 [2025-09-06 23:11:11][351826112603835][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351826112603835\",\"model\":\"SM-G981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2787\"}'\'' -e'"" [2025-09-06 23:11:11][351826112603835][404 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 23:11:11][351826112603835][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351826112603835\",\"model\":\"SM-G981B\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"EUD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2787\"}'\'' -e'"" [2025-09-06 23:11:16][351826112603835][5355 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bfcc1287-af5d-4964-b333-e4c85d55816d","id":"QR_bfcc1287-af5d-4964-b333-e4c85d55816d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 23:11:16][351826112603835][5512 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-09-06 23:11:16][351826112603835][5512 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-09-06 23:11:16][351826112603835][5512 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 23:16:05][354261830012472][1 ms][INFO] === Request start === [2025-09-06 23:16:05][354261830012472][1 ms][DEBUG] START check_scloud [2025-09-06 23:16:05][354261830012472][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 23:16:05][354261830012472][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 27204 16311 24951632 203964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 23:16:05][354261830012472][308 ms][DEBUG] targetPkg: running [2025-09-06 23:16:05][354261830012472][308 ms][DEBUG] END check_scloud in 307 ms [2025-09-06 23:16:05][354261830012472][308 ms][DEBUG] START check_boot_completed [2025-09-06 23:16:05][354261830012472][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 23:16:05][354261830012472][339 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 23:16:05][354261830012472][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 23:16:05][354261830012472][386 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 23:16:05][354261830012472][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 23:16:05][354261830012472][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 23:16:05][354261830012472][495 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8344\nsuccessfulTxPacketsPerSecond: 0.2558377523490557\nretriedTxPackets: 2151\nretriedTxPacketsPerSecond: 0.05980622782185718\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7732\nsuccessfulRxPacketsPerSecond: 0.23590234307510333\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 23:16:05][354261830012472][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 23:16:07][354261830012472][1839 ms][DEBUG] SU: done in 1343 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=303 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 303.984/303.984/303.984/0.000 ms\n [2025-09-06 23:16:07][354261830012472][1839 ms][DEBUG] check_internet: online [2025-09-06 23:16:07][354261830012472][1839 ms][DEBUG] rawBody.length=1161 [2025-09-06 23:16:07][354261830012472][1839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261830012472\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7671\"}'\'' -e'"" [2025-09-06 23:16:07][354261830012472][1840 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 23:16:07][354261830012472][1840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261830012472\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7671\"}'\'' -e'"" [2025-09-06 23:16:12][354261830012472][6759 ms][DEBUG] proc_open done in 4920 ms (timeout); code=4; out.len=0 err.len=91 [2025-09-06 23:16:12][354261830012472][6760 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-09-06 23:16:12][354261830012472][6760 ms][WARN] Detected error: Process with pid 27204 either refused to load frida-agent, or terminated during injectionProcess with pid 27204 either refused to load frida-agent, or terminated during injection\r\n [2025-09-06 23:16:12][354261830012472][6760 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-09-06 23:16:12][354261830012472][7041 ms][DEBUG] SU: done in 281 ms; outsystem 16544 16311 13358584 211740 ep_poll 0 S system_server\n [2025-09-06 23:16:12][354261830012472][7041 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-09-06 23:16:12][354261830012472][7166 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 23:16:12][354261830012472][7166 ms][WARN] targetPkg: not running, restarting 2 [2025-09-06 23:16:12][354261830012472][7166 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-09-06 23:16:12][354261830012472][7291 ms][DEBUG] SU: done in 125 ms; out [2025-09-06 23:16:12][354261830012472][7291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-09-06 23:16:12][354261830012472][7525 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-09-06 23:16:14][354261830012472][9540 ms][DEBUG] START check_boot_completed [2025-09-06 23:16:14][354261830012472][9540 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 23:16:14][354261830012472][9587 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 23:16:14][354261830012472][9587 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 23:16:14][354261830012472][9634 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 23:16:14][354261830012472][9634 ms][DEBUG] END check_boot_completed in 94 ms [2025-09-06 23:16:18][354261830012472][12649 ms][DEBUG] START runCmdUntilRes#2 [2025-09-06 23:16:18][354261830012472][12649 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261830012472\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7671\"}'\'' -e'"" [2025-09-06 23:16:23][354261830012472][17819 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41410b36-9ba4-496a-8298-1b8231705ff0","id":"QR_41410b36-9ba4-496a-8298-1b8231705ff0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 23:16:23][354261830012472][17976 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-09-06 23:16:23][354261830012472][17976 ms][DEBUG] END runCmdUntilRes#2 in 5327 ms [2025-09-06 23:16:23][354261830012472][17976 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 23:16:26][354261830012472][0 ms][INFO] === Request start === [2025-09-06 23:16:26][354261830012472][1 ms][DEBUG] START check_scloud [2025-09-06 23:16:26][354261830012472][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 23:16:27][354261830012472][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 31321 16311 23638112 124564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 23:16:27][354261830012472][307 ms][DEBUG] targetPkg: running [2025-09-06 23:16:27][354261830012472][307 ms][DEBUG] END check_scloud in 306 ms [2025-09-06 23:16:27][354261830012472][307 ms][DEBUG] START check_boot_completed [2025-09-06 23:16:27][354261830012472][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 23:16:27][354261830012472][353 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 23:16:27][354261830012472][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 23:16:27][354261830012472][400 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 23:16:27][354261830012472][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-09-06 23:16:27][354261830012472][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 23:16:27][354261830012472][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8344\nsuccessfulTxPacketsPerSecond: 0.2558377523490557\nretriedTxPackets: 2151\nretriedTxPacketsPerSecond: 0.05980622782185718\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7732\nsuccessfulRxPacketsPerSecond: 0.23590234307510333\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 23:16:27][354261830012472][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 23:16:27][354261830012472][947 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=346 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 346.047/346.047/346.047/0.000 ms\n [2025-09-06 23:16:27][354261830012472][947 ms][DEBUG] check_internet: online [2025-09-06 23:16:27][354261830012472][947 ms][DEBUG] rawBody.length=1151 [2025-09-06 23:16:27][354261830012472][947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261830012472\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6896\"}'\'' -e'"" [2025-09-06 23:16:27][354261830012472][947 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 23:16:27][354261830012472][947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261830012472\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6896\"}'\'' -e'"" [2025-09-06 23:16:31][354261830012472][4649 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d451b70-4d2b-4e92-a68e-85f466e6558c","id":"QR_8d451b70-4d2b-4e92-a68e-85f466e6558c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 23:16:31][354261830012472][4805 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-09-06 23:16:31][354261830012472][4805 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-09-06 23:16:31][354261830012472][4805 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 23:25:04][355908105631092][1 ms][INFO] === Request start === [2025-09-06 23:25:04][355908105631092][1 ms][DEBUG] START check_scloud [2025-09-06 23:25:04][355908105631092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 23:25:05][355908105631092][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 31321 16311 23674652 139376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 23:25:05][355908105631092][259 ms][DEBUG] targetPkg: running [2025-09-06 23:25:05][355908105631092][259 ms][DEBUG] END check_scloud in 258 ms [2025-09-06 23:25:05][355908105631092][259 ms][DEBUG] START check_boot_completed [2025-09-06 23:25:05][355908105631092][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 23:25:05][355908105631092][306 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 23:25:05][355908105631092][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 23:25:05][355908105631092][355 ms][DEBUG] SU: done in 49 ms; out [2025-09-06 23:25:05][355908105631092][355 ms][DEBUG] END check_boot_completed in 95 ms [2025-09-06 23:25:05][355908105631092][355 ms][DEBUG] rawBody.length=1160 [2025-09-06 23:25:05][355908105631092][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355908105631092\",\"model\":\"SM-A205G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6194\"}'\'' -e'"" [2025-09-06 23:25:05][355908105631092][355 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 23:25:05][355908105631092][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355908105631092\",\"model\":\"SM-A205G\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6194\"}'\'' -e'"" [2025-09-06 23:25:10][355908105631092][5929 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_619d8d8f-539f-4ba4-8d07-bbbcb0b64a5f","id":"QR_619d8d8f-539f-4ba4-8d07-bbbcb0b64a5f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 23:25:10][355908105631092][6086 ms][DEBUG] proc_open done in 5731 ms; code=255; res.len=3343 [2025-09-06 23:25:10][355908105631092][6086 ms][DEBUG] END runCmdUntilRes#1 in 5731 ms [2025-09-06 23:25:10][355908105631092][6086 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 23:25:14][355908105631092][0 ms][INFO] === Request start === [2025-09-06 23:25:14][355908105631092][1 ms][DEBUG] START check_scloud [2025-09-06 23:25:14][355908105631092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 23:25:14][355908105631092][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 31321 16311 23862960 150252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 23:25:14][355908105631092][300 ms][DEBUG] targetPkg: running [2025-09-06 23:25:14][355908105631092][300 ms][DEBUG] END check_scloud in 300 ms [2025-09-06 23:25:14][355908105631092][301 ms][DEBUG] START check_boot_completed [2025-09-06 23:25:14][355908105631092][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 23:25:14][355908105631092][347 ms][DEBUG] ADB: done in 46 ms; out [2025-09-06 23:25:14][355908105631092][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 23:25:14][355908105631092][410 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 23:25:14][355908105631092][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 23:25:14][355908105631092][410 ms][DEBUG] rawBody.length=1150 [2025-09-06 23:25:14][355908105631092][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355908105631092\",\"model\":\"SM-A205G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1645\"}'\'' -e'"" [2025-09-06 23:25:14][355908105631092][410 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 23:25:14][355908105631092][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355908105631092\",\"model\":\"SM-A205G\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1645\"}'\'' -e'"" [2025-09-06 23:25:18][355908105631092][4440 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50b0456b-64e4-4b4c-8145-9ca3e51e5f0b","id":"QR_50b0456b-64e4-4b4c-8145-9ca3e51e5f0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 23:25:19][355908105631092][4596 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-09-06 23:25:19][355908105631092][4596 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-09-06 23:25:19][355908105631092][4596 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 23:52:07][351364397117230][0 ms][INFO] === Request start === [2025-09-06 23:52:07][351364397117230][0 ms][DEBUG] START check_scloud [2025-09-06 23:52:07][351364397117230][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 23:52:07][351364397117230][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 31321 16311 23973668 161836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 23:52:07][351364397117230][244 ms][DEBUG] targetPkg: running [2025-09-06 23:52:07][351364397117230][244 ms][DEBUG] END check_scloud in 243 ms [2025-09-06 23:52:07][351364397117230][244 ms][DEBUG] START check_boot_completed [2025-09-06 23:52:07][351364397117230][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 23:52:07][351364397117230][275 ms][DEBUG] ADB: done in 31 ms; out [2025-09-06 23:52:07][351364397117230][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 23:52:07][351364397117230][321 ms][DEBUG] SU: done in 47 ms; out [2025-09-06 23:52:07][351364397117230][321 ms][DEBUG] END check_boot_completed in 78 ms [2025-09-06 23:52:07][351364397117230][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 23:52:07][351364397117230][431 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8656\nsuccessfulTxPacketsPerSecond: 0.013289566361449626\nretriedTxPackets: 2275\nretriedTxPacketsPerSecond: 0.013289566361449626\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7975\nsuccessfulRxPacketsPerSecond: 0.013289566361449626\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 23:52:07][351364397117230][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 23:52:09][351364397117230][1962 ms][DEBUG] SU: done in 1531 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=351 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 351.541/351.541/351.541/0.000 ms\n [2025-09-06 23:52:09][351364397117230][1962 ms][DEBUG] check_internet: online [2025-09-06 23:52:09][351364397117230][1962 ms][DEBUG] rawBody.length=1160 [2025-09-06 23:52:09][351364397117230][1962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364397117230\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6191\"}'\'' -e'"" [2025-09-06 23:52:09][351364397117230][1962 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 23:52:09][351364397117230][1962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364397117230\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71a9e0c479037ef322953\",\"group\":\"7538d51a-fe44-4969-ab5d-d74d5994efce\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"knx_zero@mx.zerotouchcorp.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6191\"}'\'' -e'"" [2025-09-06 23:52:14][351364397117230][6960 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18974b96-11e9-4899-b828-c32222b46752","id":"QR_18974b96-11e9-4899-b828-c32222b46752","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 23:52:14][351364397117230][7117 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-09-06 23:52:14][351364397117230][7117 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-09-06 23:52:14][351364397117230][7117 ms][INFO] SUCCESS response from frida (len=3343) [2025-09-06 23:52:17][351364397117230][0 ms][INFO] === Request start === [2025-09-06 23:52:17][351364397117230][1 ms][DEBUG] START check_scloud [2025-09-06 23:52:17][351364397117230][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-09-06 23:52:17][351364397117230][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 31321 16311 24156216 173572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-09-06 23:52:17][351364397117230][306 ms][DEBUG] targetPkg: running [2025-09-06 23:52:17][351364397117230][306 ms][DEBUG] END check_scloud in 305 ms [2025-09-06 23:52:17][351364397117230][306 ms][DEBUG] START check_boot_completed [2025-09-06 23:52:17][351364397117230][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-09-06 23:52:17][351364397117230][353 ms][DEBUG] ADB: done in 47 ms; out [2025-09-06 23:52:17][351364397117230][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-09-06 23:52:18][351364397117230][415 ms][DEBUG] SU: done in 62 ms; out [2025-09-06 23:52:18][351364397117230][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-09-06 23:52:18][351364397117230][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-09-06 23:52:18][351364397117230][540 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=138124 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 8656\nsuccessfulTxPacketsPerSecond: 0.013289566361449626\nretriedTxPackets: 2275\nretriedTxPacketsPerSecond: 0.013289566361449626\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 7975\nsuccessfulRxPacketsPerSecond: 0.013289566361449626\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -46, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -46 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-09-06 23:52:18][351364397117230][541 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-09-06 23:52:18][351364397117230][962 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.251.46.238) 56(84) bytes of data.\n64 bytes from sfo03s27-in-f14.1e100.net (142.251.46.238): icmp_seq=1 ttl=110 time=278 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 278.416/278.416/278.416/0.000 ms\n [2025-09-06 23:52:18][351364397117230][962 ms][DEBUG] check_internet: online [2025-09-06 23:52:18][351364397117230][962 ms][DEBUG] rawBody.length=1150 [2025-09-06 23:52:18][351364397117230][962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364397117230\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7271\"}'\'' -e'"" [2025-09-06 23:52:18][351364397117230][962 ms][DEBUG] START runCmdUntilRes#1 [2025-09-06 23:52:18][351364397117230][962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364397117230\",\"model\":\"SM-S918U\",\"profile_ID\":\"68b71adfb284223d5beef423\",\"group\":\"77228b9b-3cf3-4475-b6cc-bac130b02cab\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"true@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7271\"}'\'' -e'"" [2025-09-06 23:52:22][351364397117230][5039 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_242bcf3a-731d-42b3-9e68-652c08945a35","id":"QR_242bcf3a-731d-42b3-9e68-652c08945a35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD66.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-09-06 23:52:22][351364397117230][5195 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-09-06 23:52:22][351364397117230][5195 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-09-06 23:52:22][351364397117230][5195 ms][INFO] SUCCESS response from frida (len=3343)